0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) epoll_wait(r3, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x155556ff, 0x4) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000016) 23:24:54 executing program 1: 23:24:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) pipe(0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) open(0x0, 0x0, 0x0) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$FUSE_POLL(r2, &(0x7f00000005c0)={0x18}, 0x18) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) 23:24:54 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x6c40, 0x0) 23:24:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x4, &(0x7f0000000840)="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") ptrace$cont(0x9, r1, 0x0, 0x0) eventfd2(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) setgid(r4) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000600)) r9 = syz_open_pts(r8, 0x0) read(r9, &(0x7f0000000080)=""/11, 0xb) fstat(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r7, r10}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r12, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r14, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r14, 0x40045431, &(0x7f0000000600)) r15 = syz_open_pts(r14, 0x0) read(r15, &(0x7f0000000080)=""/11, 0xb) fstat(r15, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r13, r16}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) r18 = eventfd2(0x0, 0x0) fstat(r18, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r19) r20 = eventfd2(0x0, 0x0) fstat(r20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r21) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = eventfd2(0x0, 0x0) fstat(r24, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r25) stat(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = eventfd2(0x0, 0x0) fstat(r27, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r28) r29 = eventfd2(0x0, 0x0) fstat(r29, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r30) r31 = eventfd2(0x0, 0x0) fstat(r31, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r32) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=r16, @ANYBLOB="02000c00", @ANYRES32=r17, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02f8ff65191c884d5d03000000", @ANYRES32=r3, @ANYBLOB="040000000000000008000000", @ANYRES32=r19, @ANYBLOB="08000200", @ANYRES32=r21, @ANYBLOB="08000200", @ANYRES32=r23, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r25, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32=r28, @ANYBLOB="08000400", @ANYRES32=r30, @ANYBLOB="08000300", @ANYRES32=r32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0xac, 0x2) 23:24:54 executing program 1: 23:24:54 executing program 1: 23:24:54 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) vmsplice(r1, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x402000, 0x0) tkill(r0, 0x3c) sched_rr_get_interval(r0, &(0x7f00000001c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000140)) 23:24:54 executing program 3: 23:24:54 executing program 1: 23:24:54 executing program 1: [ 1056.860444] input: syz1 as /devices/virtual/input/input1873 23:24:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:24:54 executing program 3: 23:24:54 executing program 1: 23:24:54 executing program 0: 23:24:54 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = fcntl$getown(r2, 0x9) setpriority(0x0, r3, 0x5) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 23:24:54 executing program 3: 23:24:54 executing program 1: 23:24:54 executing program 3: [ 1057.101412] input: syz1 as /devices/virtual/input/input1875 23:24:57 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) tkill(r0, 0x23) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:24:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:24:57 executing program 1: 23:24:57 executing program 0: 23:24:57 executing program 3: 23:24:57 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) rt_sigaction(0x0, &(0x7f0000000100)={0x0, {}, 0x0, &(0x7f00000000c0)="c483790294e30200000000c4027979d5c4e17fe674e2f8c482d53fe7663e660f3adf5e0065661c0181cfbf9fdc690f93f10fb6416c0f9d0cee"}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="7311400000ef45e8441ec9ac90e8d76108be3407df70c0452a"], 0xff86) close(r7) socket$netlink(0x10, 0x3, 0x6) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 23:24:57 executing program 1: 23:24:57 executing program 0: 23:24:57 executing program 3: 23:24:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40800, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8}, @void, @x25={0x2cd2620cf479007d, 0x7, 0xfb, "dc748a37d2b3cb2e7b5fd0af876bbaf054daec7063e9ac11d6a6153dfa0d9d0552a9956d4a5a7703aee5c103b3f87319333c5a00214a18701bb34a3cce64fa8a94e07e29bca37109623808351f16e425d04c6ffad7463286126268b012d4150fa2f6890a1d49c187056231fa3ef167c1ec8172e96ab884123b99e480c5083887549d8a75179bae5fb9b52b1786e2ba95be326071c6caf231d75257647619b99f143c0d1fa595d489362578ccf2b3acefb7a377fa"}}, 0xbb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet_buf(r4, 0x0, 0x25, &(0x7f0000000140)=""/156, &(0x7f0000000200)=0x9c) 23:24:57 executing program 1: 23:24:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0xc003, 0x0) connect$unix(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) [ 1059.953947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1059.970102] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1059.987359] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1059.998679] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.009346] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.018979] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.028792] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.038406] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.048998] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.058551] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.068332] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.077904] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.087598] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.097127] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.106681] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.116250] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.175563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1060.184363] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.194036] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.203808] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.213471] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.223201] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.232759] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.242299] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.251937] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.272972] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.282547] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.292086] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.301731] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.311255] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.320812] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1060.330335] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket 23:25:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/member\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xe6b, 0xf4}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) wait4(r2, &(0x7f0000000140), 0x1000006, &(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240)={0xa, 0x4, 0x80, 0x7f}, 0xa) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 23:25:00 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x6f, 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) clock_settime(0x2, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) 23:25:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0xe, 0x0, &(0x7f0000000000)) 23:25:00 executing program 3: r0 = epoll_create(0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x2, 0x5, 0x2, 0xfffffff8, 0x4, [{0xe8, 0x7, 0x9, 0x0, 0x0, 0xd134f4873a79694e}, {0x0, 0x40, 0x9, 0x0, 0x0, 0x40}, {0x0, 0x5, 0x74, 0x0, 0x0, 0x2203}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1c46}]}) syncfs(0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) socketpair(0x9, 0x1, 0xf1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r1, &(0x7f0000000200)=""/114, 0x72, 0x10001) r2 = socket(0x2, 0x2, 0x3) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000280)={0x9, 0x0, 0xffffffff}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x80000, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000300)={0x2, 0xca, 0xffe0, 0x1f, 0x8, 0x8000}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) fdatasync(r3) 23:25:00 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x2, 0x3, 0x1, 0x3}}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 23:25:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:00 executing program 1: r0 = epoll_create1(0x0) r1 = gettid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = fcntl$getown(r2, 0x9) setpriority(0x0, r3, 0x5) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) [ 1062.908247] sock: process `syz-executor.1' is using obsolete getsockopt SO_BSDCOMPAT 23:25:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = dup(0xffffffffffffffff) write$P9_RREMOVE(r3, &(0x7f0000000200)={0x7}, 0x7) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r4, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r6, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r1, 0x0, 0x0, 0x800) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9b5300", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf2502000000080001004e23000014000700fe8000000000800100000000000000bb0400050008000800e000000114000900fe880000000000000000000000000001", @ANYRES32, @ANYBLOB="080003002f00000000fe800000aa1400070066e329c7949daacfcde122b5862fe9b000000000000000000000006273a4a3bdea40f5777f6d80d69d552026b1a2949b1b0817d3d818c2d553bdedb0c72f7e96af32aa1aa5bfb8e9899c04f47ca0702163a5abf1f090379db13084b83157f7e55b8ff4fd0dbf9071814b501bc4477476b6f2e3af82e6a72bdd9dcc85fb19919ccd75ef834d75fab252a7887547ee8a267fed62142b99e3d7340b1479a28b769ae291acb75c81da3776d35886338e88ea29dea41909ae1db83d18fe14724a39f64e5d"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r8, &(0x7f00000000c0), 0xf0caebd3, 0x0, 0x0, 0x0) [ 1063.033166] input: syz1 as /devices/virtual/input/input1877 23:25:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x4, 0x6, 0x7f, 0xff, 0x0, 0x8001, 0x4000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf0a9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x10000, 0x1, 0x778e, 0x5, 0x7fffffff, 0x7fffffff, 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) 23:25:01 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast1, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@local, @remote, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7d543473a92f3b}) gettid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x2b}, 0x2c) r5 = syz_open_procfs(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_KEEPCAPS(0x7) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) fchdir(0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)='F', 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r7, 0x344) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r7, 0x17, 0x50}, &(0x7f0000000080)=ANY=[@ANYBLOB='enc=raw hash=sha3-384\x00'/77], &(0x7f0000000140)="9d01fe1b870b61da2897dc812087e1ae5cc2d720c512d0", &(0x7f00000003c0)=""/80) 23:25:01 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x8, 0x100010, r2, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000180)=""/240) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_create(0x4, 0x0, &(0x7f0000000380)=0x0) timer_gettime(r3, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000000c0)={{r4, r5+30000000}, {0x77359400}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) [ 1063.250047] audit: type=1400 audit(1574810701.103:94): avc: denied { attach_queue } for pid=1276 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tun_socket permissive=1 23:25:01 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x80000) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='bridge_slave_0\x00') tkill(r1, 0x1000000000016) [ 1063.375803] qtaguid: iface_stat: create(lo): no inet dev [ 1063.381642] qtaguid: iface_stat: create6(lo): no inet dev [ 1063.392197] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1063.409301] qtaguid: iface_stat: create6(lo): no inet dev 23:25:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)="fe93f92fa413b68ef17afbdafd5f14e3647aaf0baf79e0cbe7d72caedf3105f060529b1ed1de184af4b5d788ad54a6f1a4524dec4d3c068e979943a7b9d92f5dddc76231", 0x44}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="9024ce5ab65dcd62d100dca62b4e336ed02e83756452496186dfb6babdf8875facf5e2325c0f2565c6c9d7f34a018dea7dce1631cad7be5789bf6fff972cb007d8670ffcd3e5d4d3f9228bc7c5cd80f98f08a5970eb0b45804a13ae9681c00819e1bad2a12052c5e1c6ebb10776b165d2895ff6795a6d75306afa3fa8f45f9e1ce2832105af07554169570f9249168967a530132780ea2c39ed423b9678bb211673e4bebd15c0edbd83443beb54b9d2418e10ca72390", 0xb6}, {&(0x7f00000002c0)="3c25cf470ea3a582e4d8cb120a00fc12adf9c52c49cc4d61608dc69ef3c7f26d7aff6b2d28c0fc351fc63464860733937773106e9950ce4eea33adc884d97aab2f03ae1c55f229354dde27c728245603fb3fbc48ac16bd2f3f1c6af7c86e3ea95162", 0x62}, {&(0x7f0000000340)="cb546e717e23beae7e3776aab1fcece10d26e56369a12a1e931116568df429113a4d6c12dfc1a8a5ba616bccc39f1a6757ceaab2da8458c10bd08827b428bcd3d375396a380240bc628e066d678fdb03e4a2a2c134461e4fcef8f43d32d71239ec731091d5253ed19631ceebbe79a31413d687ce92c2e796fa0b73469385e830b0ac7a907c5345756a6732ac4475221a681c27235579f2eb91eca6fdb93c9685be7eae6fef2da351a28b33", 0xab}, {&(0x7f0000000400)="1e79ea3cfce812e89f49e83ff0cb55f57b4595fe2a0c1236766ddb6251750723d7dbb4e2aaf4fd891c974f5a91f7d5306a59dd587e6fe4c6959680", 0x3b}, {&(0x7f0000000440)="d5d7f1670c62f4286e246bc5bb1d86a80ef64b3a2711982d9e304e5b421d4959ca4266b783f7024da383141f0119554788ca47e096e4ae92b71093ce70e1fe63929383c0ab7df526eb0e1f866d1c9300a95ac46f1ee7f3790d90e22524ddd065cedf77f041a3a3bde09c548a1ee96dbd2724886362909884f3915643b594c1cb307dd9a024694226c29f", 0x8a}, {&(0x7f0000000500)="20f13eea55a6541cec3d97ca66a7bc6af32efe0e5852692940b51f278b04f9cd6f096c95ac92229b07", 0x29}], 0x8, 0x20) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0xf}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) wait4(0x0, 0x0, 0x0, 0x0) 23:25:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0x8000}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x8c800) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x3, 0x0, 0x7}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 23:25:03 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f00000000c0)={0x10}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x8000, 0x0) epoll_wait(r5, &(0x7f00000001c0)=[{}], 0x1, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 23:25:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000e80)="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", 0x6, 0x0, &(0x7f0000000080)="5aba6333eb2d"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000340)={0x41424344}, 0x1, 0x0) write$tun(r5, &(0x7f0000000880)={@void, @void, @ipv6={0x5, 0x6, "00a63a", 0xdf, 0x3c, 0x5, @mcast1, @ipv4={[], [], @loopback}, {[@routing={0x2e, 0xc, 0x0, 0x8, 0x0, [@mcast1, @loopback, @loopback, @ipv4={[], [], @multicast1}, @rand_addr="ff30f70ba3b38189451491e1fc5fefac", @rand_addr="8e3705ad8d8cd75baa4cd0f618e1f35e"]}, @srh={0x3a, 0x8, 0x4, 0x4, 0x7, 0x10, 0x3, [@mcast1, @empty, @rand_addr="ee54df517f2558785bce40f6e518b342", @ipv4={[], [], @local}]}], @tcp={{0x4e20, 0x4e24, r6, r7, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0xaafa, {[@mptcp=@mp_join={0x1e, 0x3, 0xb}, @exp_fastopen={0xfe, 0x8, 0xf989, "50854929"}, @fastopen={0x22, 0x5, "2e0f34"}]}}, {"84aa246664daf44f292532"}}}}}, 0x107) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22202004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000ffdbdf25160000001c00060004000200040002000800010000000080080001000500000057488c5d21e1d3dd2a071aaebe7fe15aa82e7a2923b00a237abf"], 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') write$P9_RMKNOD(r3, &(0x7f0000000280)={0x14, 0x13, 0x1, {0xa, 0x2, 0x2}}, 0x14) [ 1065.936847] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1065.979677] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1066.012251] input: syz1 as /devices/virtual/input/input1878 23:25:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x120c80, 0x0) read(r0, 0x0, 0x0) 23:25:04 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000440)=""/10) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x6) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/sux/enforce\x00', 0x10000, 0x0) sendfile(r7, r6, 0x0, 0x40000000009) read$FUSE(r6, 0x0, 0x0) socket$inet(0x2, 0x6, 0x3f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0x88) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000400)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, 0x0, 0xfeb0) r8 = dup(r5) r9 = socket$inet6(0xa, 0x401000000001, 0xb) close(r9) r10 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) setsockopt$inet6_tcp_int(r10, 0x6, 0x9, &(0x7f00000005c0)=0xfc, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0xfffffffffffffd92}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r12 = open(&(0x7f0000000240)='./file0\x00', 0x141042, 0x0) ftruncate(r12, 0x2007fff) sendfile(r8, r12, 0x0, 0x8000fffffffe) 23:25:04 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000180)={0x1000, 0x7, 0x8}) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') 23:25:04 executing program 4: r0 = epoll_create1(0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) sync_file_range(r1, 0x325, 0xdf8, 0x4) r2 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000016) 23:25:04 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x400}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') [ 1066.440262] input: syz1 as /devices/virtual/input/input1882 23:25:04 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000180)={0x1, 0xd8cf, 0x6, 0xf57, 0x400, 0xeb}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) read(r2, &(0x7f00000000c0)=""/84, 0x54) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) [ 1066.661354] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 1066.693789] input: syz1 as /devices/virtual/input/input1885 23:25:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000140)=0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000480), 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a3014308b7afc9d74e16db55687bc251ea6daf992a31dad77ae42080f2562939d3aaeac6157f16382192221ec37b800ed5bc17dcc950cdbfaca90511e813c67cc9a334469fc1c7d7314ff21a9a6a7ede04bb7c8154c0a3ff413e88fb40adb28d9892ef993f863128b11e800"], 0x6e) dup3(r2, r3, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r7 = dup3(r3, r1, 0x80000) preadv(r7, &(0x7f0000001580)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f00000001c0)}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000004c0)=""/63, 0x3f}], 0x6, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 23:25:06 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sched_getscheduler(r2) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x2b, 0x3, @tid=r3}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{r6, r7+30000000}, {r4, r5+10000000}}, 0x0) tkill(r1, 0x1000000000016) 23:25:06 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xd432}) pipe2(0x0, 0x4000) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x0) write(0xffffffffffffffff, &(0x7f0000000380)="07eb4aaa2a39cbcb2f0b3a8da322e4a9d2559433f3e3ba86945dd806000000b990", 0x21) pipe(&(0x7f00000003c0)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) creat(0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) poll(&(0x7f00000001c0)=[{r5, 0x400}, {r6, 0x1}, {r7, 0x100}], 0x3, 0x7) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000000580)='net/wireless\x00') r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x84) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) write$P9_RLERROR(r10, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0xfffffffc], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r11, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r11, 0x5502) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/n\x7f|l\xe3', 0x400, 0x0) dup2(r12, r0) sendfile(r4, r9, 0x0, 0x80000001) 23:25:06 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe2(&(0x7f0000000100), 0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) fsetxattr$security_smack_transmute(r1, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) fsync(r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2100, 0x0) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7]}, 0x45c) r6 = dup(r2) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040008}, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) write(r5, &(0x7f0000000300)="21303638891edc043367d653b3af364d641fb46812672298dd0e5e76746c10fd95bb5ba150b2f128126856d94bb22288eff7bb2484432995da41db3504f4a3420543f53ab53b34054859808172", 0x4d) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:25:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:06 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/109, 0x6d, 0x7, 0x7, 0x2, 0x7fff}, 0x120) tkill(r1, 0x1000000000016) personality(0xc) [ 1069.028998] input: syz1 as /devices/virtual/input/input1888 [ 1069.140672] input: syz1 as /devices/virtual/input/input1889 [ 1069.227190] input: syz1 as /devices/virtual/input/input1890 [ 1069.274997] input: syz1 as /devices/virtual/input/input1891 [ 1069.303518] input: syz1 as /devices/virtual/input/input1892 23:25:07 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {r2, r3+30000000}}, 0x0) tkill(r1, 0x1000000000016) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000100)) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) ioctl$RTC_VL_CLR(r5, 0x7014) 23:25:07 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast1, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@local, @remote, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7d543473a92f3b}) splice(r0, &(0x7f0000000380)=0x7f, r3, &(0x7f0000000440)=0x2, 0x8, 0x1) gettid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x2b}, 0x2c) r5 = syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) fchdir(0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)='F', 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r7, 0x344) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r7, 0x17, 0x50}, &(0x7f00000004c0)=ANY=[@ANYBLOB="656e633d72617720686173683d736861332d3338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d269e5e1b4b8f105eef3caed0f4d0628ffd401862f177b254852843bc4b1d5c07fb3680c2e67d4185cdd55288e8bfa6771ed60be6003b81e31b40e28048a330bacefa168b726f7ebd403d228e15b82690fcf1f8cd14a17877a7a636682b3be9bb75a3174c48dd1174042c41c7a0d5ff978f7c9d06c7391b9d3f5095447d65513a33c86e3f7de376e14cd4742e28eeb9f7e5686d1f349c99f0bb9353584e1cd4fb748969a5398e4e4c3"], &(0x7f0000000140)="9d01fe1b870b61da2897dc812087e1ae5cc2d720c512d0", &(0x7f00000003c0)=""/80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x24e1) 23:25:07 executing program 5: creat(&(0x7f0000000a40)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000005000/0x1000)=nil, 0x1000) munmap(&(0x7f0000009000/0x4000)=nil, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x600, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'ip6gre0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x881933544fd78ae1}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f00000001c0)={0x6, 0x3f, "ec6ed521ad55145f24a3dd86df8e6d789560bb61be13d641513dd622f50b8cdc74ee21a169930eccd3ab54a2d3fb80d39195dc9cab76efccd1e07bf0af5ee4"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x7, 0xbf]) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) 23:25:07 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xd432}) pipe2(0x0, 0x4000) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x0) write(0xffffffffffffffff, &(0x7f0000000380)="07eb4aaa2a39cbcb2f0b3a8da322e4a9d2559433f3e3ba86945dd806000000b990", 0x21) pipe(&(0x7f00000003c0)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) creat(0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) poll(&(0x7f00000001c0)=[{r5, 0x400}, {r6, 0x1}, {r7, 0x100}], 0x3, 0x7) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000000580)='net/wireless\x00') r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x84) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) write$P9_RLERROR(r10, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0xfffffffc], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r11, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r11, 0x5502) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/n\x7f|l\xe3', 0x400, 0x0) dup2(r12, r0) sendfile(r4, r9, 0x0, 0x80000001) [ 1070.158668] input: syz1 as /devices/virtual/input/input1893 23:25:09 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast1, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@local, @remote, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7d543473a92f3b}) splice(r0, &(0x7f0000000380)=0x7f, r3, &(0x7f0000000440)=0x2, 0x8, 0x1) gettid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x2b}, 0x2c) r5 = syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) fchdir(0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)='F', 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r7, 0x344) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r7, 0x17, 0x50}, &(0x7f00000004c0)=ANY=[@ANYBLOB="656e633d72617720686173683d736861332d3338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d269e5e1b4b8f105eef3caed0f4d0628ffd401862f177b254852843bc4b1d5c07fb3680c2e67d4185cdd55288e8bfa6771ed60be6003b81e31b40e28048a330bacefa168b726f7ebd403d228e15b82690fcf1f8cd14a17877a7a636682b3be9bb75a3174c48dd1174042c41c7a0d5ff978f7c9d06c7391b9d3f5095447d65513a33c86e3f7de376e14cd4742e28eeb9f7e5686d1f349c99f0bb9353584e1cd4fb748969a5398e4e4c3"], &(0x7f0000000140)="9d01fe1b870b61da2897dc812087e1ae5cc2d720c512d0", &(0x7f00000003c0)=""/80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x24e1) 23:25:09 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x80000) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x9) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_bridge\x00', 0x2}, 0x18) rt_sigsuspend(0x0, 0x0) 23:25:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2074043}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c100}, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:09 executing program 1: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000680)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f0000000000)='./bus\x00', 0x22100, 0x0) mount(&(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r7, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) nanosleep(&(0x7f0000000100), 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 23:25:09 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r4) ioprio_get$pid(0x2, r1) 23:25:09 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000140)="9179690cb5b9b07b8fee5d3d891a759662f0a5b11d4aa30b0949e03f8ee502e6411d3edd87d0acae4778c0b0dda5db1a6b67d56fc3c8d923e5bdce21654477be5ddbb93dc90b1eef18376135f1c97670f722e4d64fb9020b4a5de84702d80e010a7ce9f13a8f7d3a334fe2444bc7694f62fb426be617ee49f3204004531e089fff2537eba9c81ad53fd1", 0x8a}], 0x1, 0xd) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setitimer(0x2, &(0x7f00000002c0)={{0x0, 0x7530}, {r3, r4/1000+10000}}, &(0x7f0000000300)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x4) [ 1072.163813] input: syz1 as /devices/virtual/input/input1894 23:25:10 executing program 4: r0 = gettid() epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x7) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x1e, 0x37, 0x2, {0x4, 0x80000001, 0x3, 0xffffffffffffffff}}, 0x1e) r2 = getpgid(0x0) wait4(r2, 0x0, 0x1, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x5000) 23:25:10 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xc2) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000600)) r6 = syz_open_pts(r5, 0x0) read(r6, &(0x7f0000000080)=""/11, 0xb) fstat(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r4, r7}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) connect$packet(r1, &(0x7f00000000c0)={0x11, 0xf6, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) r9 = fcntl$dupfd(r8, 0x406, r0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r10 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r10) keyctl$clear(0x7, r10) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r10) r11 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="240710dc8702fbd5f3677e25a5", 0xd, r10) keyctl$set_timeout(0xf, r11, 0x0) [ 1072.566429] input: syz1 as /devices/virtual/input/input1897 [ 1072.667994] input: syz1 as /devices/virtual/input/input1898 [ 1072.789556] input: syz1 as /devices/virtual/input/input1900 23:25:10 executing program 0: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) sched_getscheduler(r3) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r5 = dup3(r2, r2, 0xaf0fd6c1bb575de2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x28}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1072.837098] input: syz1 as /devices/virtual/input/input1901 23:25:10 executing program 1: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000680)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f0000000000)='./bus\x00', 0x22100, 0x0) mount(&(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r7, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) nanosleep(&(0x7f0000000100), 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 23:25:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x7, 0xfffffffffffffffc, 0x2, 0x0, 0x0, [{r2, 0x0, 0x1f}, {0xffffffffffffffff, 0x0, 0xfff}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="045677df499831959dad05b8d040f97b6398ef89416bc3a53a3ade22970fc3d67ba1671073b96694ba7ba870ddae35171a366e5789a3725927c6abae1725936471a269dfcd5007d0cbab57841892bbd42b3544e1d7f25a854cec7a713d76aaa77bc128c14932c8e6a07988a186309ab6674d54e5190f15d3ce8999b3e5ea887fe2853ad1c087c02714c6834d9de21bbb6c80a30edfd3f4d8acaf1d59b636111fa476f916eda2f610401cc7c88c7cd8d90f6c34a7cc901b50bb9e5c534bf0027393ccdfa3c967683f9d95094da4f6d13d1440a4e7", 0xd4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0xf79, @remote, 0x982e}, 0x1c) [ 1073.003241] input: syz1 as /devices/virtual/input/input1902 23:25:10 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000680)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f0000000000)='./bus\x00', 0x22100, 0x0) mount(&(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r7, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) nanosleep(&(0x7f0000000100), 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) [ 1073.077536] input: syz1 as /devices/virtual/input/input1903 23:25:11 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast1, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@local, @remote, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7d543473a92f3b}) splice(r0, &(0x7f0000000380)=0x7f, r3, &(0x7f0000000440)=0x2, 0x8, 0x1) gettid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x2b}, 0x2c) r5 = syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) fchdir(0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)='F', 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r7, 0x344) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r7, 0x17, 0x50}, &(0x7f00000004c0)=ANY=[@ANYBLOB="656e633d72617720686173683d736861332d3338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d269e5e1b4b8f105eef3caed0f4d0628ffd401862f177b254852843bc4b1d5c07fb3680c2e67d4185cdd55288e8bfa6771ed60be6003b81e31b40e28048a330bacefa168b726f7ebd403d228e15b82690fcf1f8cd14a17877a7a636682b3be9bb75a3174c48dd1174042c41c7a0d5ff978f7c9d06c7391b9d3f5095447d65513a33c86e3f7de376e14cd4742e28eeb9f7e5686d1f349c99f0bb9353584e1cd4fb748969a5398e4e4c3"], &(0x7f0000000140)="9d01fe1b870b61da2897dc812087e1ae5cc2d720c512d0", &(0x7f00000003c0)=""/80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x24e1) 23:25:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = fcntl$dupfd(r2, 0xac28667653f86616, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x11ff}]}, 0x10) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2bd) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) remap_file_pages(&(0x7f0000432000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r2 = dup(r1) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4800) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000480)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x9cX7\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\xad\xcb\x859\xca\x1d*e7\f=v \xb6\x990:\xa4\xc2R|\xb9ZOYf\r3\x8e\x01\xa3gl\x1b=\xde\xd9\xc4K\x00\xd6\x12\xd6\x17\xaf\x1f\x98\xd8\xab4V\xb4\xbb\x8b\x95o\xdd\xd8\x1b\t@A\xc4\xc5\xfc\xdeZc\xefK\xf9\xcb\xa0\xf8+\xd1\x99[\xfb\xd1/\x8e\xf1\xd4\xe0NzX\x1c\xc9\xd3\xbb\xd1\x86\xd9\aS\x10~\xf1\xe5@I\xc5\xf7\x86\xa4', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r6, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x2003, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000300)={0x90000000}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 1073.780518] input: syz1 as /devices/virtual/input/input1909 [ 1073.860373] input: syz1 as /devices/virtual/input/input1910 23:25:11 executing program 1: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420000a77, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000100)={'\x00', 0x200}) r5 = dup(r1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) 23:25:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) fallocate(r1, 0x2, 0x8a, 0x8) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420000a77, 0x0) ioctl$sock_netdev_private(r3, 0x89f9, &(0x7f0000000140)="17b9fb648155a3a88f35715fdbb332c38a753f836760141aa78a5dd8ebef29136a42c0695101d99496e4ab1319925e9acc65d001b7cd5dbce8db8c80ca552b32c08d790f8124fb8bba82732b27331bd476701a247d6412e86d8485a26141a87b53d5368b762f9c28a5bd3f19a64873998367071d04c575f6413425f4130d9ea4183a32a1e59324b4494800a10ecf77776d7c1490d9d57532") ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) r5 = fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@local, 0xfff, 0x0, 0x9abcb4ae11acd776, 0x1, 0x7, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') [ 1074.317956] input: syz1 as /devices/virtual/input/input1913 23:25:12 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') r0 = socket$netlink(0x10, 0x3, 0x3d) sendmsg$nl_generic(r0, &(0x7f0000001240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800401}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0x107c, 0x40, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1e}, [@generic="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", @nested={0x68, 0x28, [@typed={0x64, 0x34, @binary="87ffe98abe26bfe0b5ec799acbb81732c1bb00f25dd3c4ebb31ea89e12e02f15388cef3806032d46e1d3bc15af686c0343b4b6dd4c17c1baeb5f41d9b04584e75e320707478c6e3f242451bc1091e97c2c0edc73fa6e4cdaf3c75437d8a5b07c"}]}]}, 0x107c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:13 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r3, 0x0, 0x11420000a73, 0x1) write$FUSE_STATFS(r3, &(0x7f0000000180)={0x60, 0x0, 0x4, {{0x100, 0x4, 0x5, 0x5, 0x8000, 0x10000, 0x1c8e, 0x1}}}, 0x60) setpriority(0x3, r2, 0x8) r4 = epoll_create1(0x0) gettid() epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1b) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) tkill(r5, 0x17) 23:25:13 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast1, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@local, @remote, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7d543473a92f3b}) splice(r0, &(0x7f0000000380)=0x7f, r3, &(0x7f0000000440)=0x2, 0x8, 0x1) gettid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x2b}, 0x2c) r5 = syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) fchdir(0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)='F', 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r7, 0x344) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r7, 0x17, 0x50}, &(0x7f00000004c0)=ANY=[@ANYBLOB="656e633d72617720686173683d736861332d3338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d269e5e1b4b8f105eef3caed0f4d0628ffd401862f177b254852843bc4b1d5c07fb3680c2e67d4185cdd55288e8bfa6771ed60be6003b81e31b40e28048a330bacefa168b726f7ebd403d228e15b82690fcf1f8cd14a17877a7a636682b3be9bb75a3174c48dd1174042c41c7a0d5ff978f7c9d06c7391b9d3f5095447d65513a33c86e3f7de376e14cd4742e28eeb9f7e5686d1f349c99f0bb9353584e1cd4fb748969a5398e4e4c3"], &(0x7f0000000140)="9d01fe1b870b61da2897dc812087e1ae5cc2d720c512d0", &(0x7f00000003c0)=""/80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x24e1) 23:25:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c00)={'syz1\x00', {}, 0x27, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/166, 0x2e6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x1000000000000012}, &(0x7f00000002c0)) r2 = gettid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000140)={'hsr0\x00', 0x1}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) tkill(r2, 0x15) 23:25:13 executing program 1: r0 = eventfd2(0x87, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(0xffffffffffffffff, &(0x7f0000002340), 0x100000000000003a) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x01\x01\x00\x00\x00\x80\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x400, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}], 0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0xffffffe, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x2a201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0), 0x0, 0x0) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f00000003c0)=0x80000000021, 0x3) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x5c001) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x8, 0x1, 0x1800000000009) r9 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r9) r10 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r11 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r11, &(0x7f0000000440)=[{&(0x7f0000000480)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) write$binfmt_elf32(r4, &(0x7f0000001d00)=ANY=[@ANYBLOB="37d6f11a2b7dceb447fb060000006c97e339012c36ada06b9f16fc12133f4cc6b160fdc792e3f952ffa280daacd7cb7b92a34de0760a9e26bb18160113bc9bec9e017a8db58546be8d0b2d2dcd58de75ca618343b12c0de9cfe9925209001fb3fe09f039149b2a63875e708980ef593297187082ec43c70bed88942532000000007df5a9038d647b4674225c027226a9f01489904551c7c825ca446c882ee90500000000000000d68a936c567c6fbc125ae43c25785b5f4791dc16a61408bce7315e512fcb8872af9c8ca6d71a62640f4e8a1a256a2d7b96c8464da8d272cbd44df2d71b4b8268222af8f90e197daa4caf0b1f474f89e92ab5064cb9a4a122a7bc0ee482c38a22d661a5f088d87cf35e1f352f5e0d75418bf6549c54070ab43ec581243dbb30ef7a2dcb616f13e10400004a98ea9cbb24810bcfc21b2b31000000001000000000000000000140000000000000000000000000000000000000000000004a4c0dc5ce0773473b88c752388b5ad2bd96eb7cd8e4605046fc9c8c74369884ea5c32cbd74545b070d488b895095c0a85abd1303577ad2d447588815cf428cf590ba6968b07aa493926343eb3db8910d34d9addbad750f20065892388864be72967a85d555afaf0a1ebedb11ddfed69a0c5a61afe1d85d854c58e12a996e1d866b1926b1f00fd827f93c7487bd871e78de47a65098783c8815d02879d7662e81291553d09a15475b2f57ecdd440f58d1b5360506844ec81c4fdc66d5867d5510a29c55518afa4c793dc649021cf8ca47648f7e00227462cc61193cd3b85710008000000000000cb771a49bd3c1d50247091ad5b54bffc495a8d34fc319ea7a0195ad76fb6f98eb838402c1a1484d61ea055dc382b"], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x411, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) eventfd(0x8) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x200000, 0x0) r14 = timerfd_create(0x0, 0x0) timerfd_settime(r14, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r14, &(0x7f00000000c0)) r15 = timerfd_create(0x0, 0x0) timerfd_settime(r15, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r15, &(0x7f00000000c0)) r16 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timerfd_settime(r12, 0x1, &(0x7f0000000080)={{0x77359400}, {r17, r18+10000000}}, 0x0) fstat(r16, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000980)={0xa0, 0x19, 0x0, {0x2002, {0x0, 0x1, 0x6}, 0x0, 0x0, r19, 0x2000000000442, 0xfffd, 0x100000000, 0x9, 0x0, 0x6, 0x7fff, 0x3, 0x0, 0x915, 0xac46, 0x0, 0x20000000000003}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000a40)=""/4110, 0x100e}, {0x0}], 0x3) read(r12, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r10, r11, 0x0, 0x180003) 23:25:13 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=@hat={'changehat ', 0x3, 0x5e, ['\x00', 'eth1\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:', '\x00', 'nr0\x01\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:', '/dev/net/tun\x00', 'nr0\x01\x00', '-!\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:']}, 0x6a7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') [ 1075.565188] input: syz1 as /devices/virtual/input/input1915 23:25:13 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) tkill(r1, 0xf) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000180)=""/154, 0x9a) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) 23:25:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420000a77, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:13 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) wait4(r0, 0x0, 0x80000002, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x7, &(0x7f0000000180)={{}, {r1, r2/1000+10000}}, &(0x7f00000001c0)) 23:25:13 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000180)=0x5, 0x4) tkill(r1, 0x1000000000016) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {r2, r3+10000000}}, &(0x7f0000000100)) 23:25:13 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=@hat={'changehat ', 0x3, 0x5e, ['\x00', 'eth1\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:', '\x00', 'nr0\x01\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:', '/dev/net/tun\x00', 'nr0\x01\x00', '-!\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:']}, 0x6a7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:14 executing program 4: epoll_create1(0x0) r0 = gettid() r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) epoll_wait(r2, &(0x7f0000000000), 0x1555555555555570, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) [ 1076.337114] input: syz1 as /devices/virtual/input/input1916 23:25:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) setxattr$smack_xattr_label(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64EXEC\x00', &(0x7f00000001c0)={'status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce'}, 0x110, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) wait4(r2, &(0x7f0000000340), 0x2, &(0x7f0000000380)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:16 executing program 4: r0 = epoll_create1(0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r1, 0x48280) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000800)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd7\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9\x9a2\xd4\rQ\xdf\xab:\x93)4Yv;\xac\xafJ\xb8\xbe\xf4H.\xefZ\x8e\x16\x01\xbb{D\xc4\xaf\x9e\xf2.\xeb\x98K\xd8\x858\x13\x91\xce@\xb3\xb3Q\xa2\x9b^\xbd\xb8\x0e\x8d\v[\xf6\xcdm$\xb8\xf7e)\xb1(\x12#\xaa\x9f\xcd\x9cJW\x9b\xfbU\xf4\xe8\xaai\x17\xf0\xbcT\xc9^T\x12\xeb4G\xbdGAR\xef\x16\x1d\xf4\\\xaf\xb1\xf1\xde\x8d\xb7\x05(~5E\"03V\x1d\x8f0\x02\x86le\xce\x80L\xe0\xfe\xec\x9f\x10>\x8c\xa8g2\xd1\x0f\x93\x17\x01\xd5\x12\xd27\xc2\x91\xce\xe6rH`\x16P\xfa\"\b2\x04\xbci\xd6;\x0e\x15]\ayM[\x9a(l\xf2\xaeW%\x04\x04(\xd8zW\xf2g\xdb\xb75\n\x82\'\xf3\x04x') r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r9 = gettid() setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x87, @multicast1, 0x4e21, 0x4, 'dh\x00', 0x8, 0x1, 0x4c}, 0x2c) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r9, 0x1000000000016) 23:25:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x280002, 0x30) write$UHID_INPUT(r3, &(0x7f0000000c80)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006) 23:25:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), 0x0) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) getgid() pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r6, 0x29, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback, 0x80}, 0x268) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x4794, 0x4) r9 = timerfd_create(0x2, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r9, &(0x7f0000000140)={0xa0000000}) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r12 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r12, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11}) 23:25:16 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x18, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x1000004000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_POLL(r3, &(0x7f0000000280)={0x18, 0xfffffffffffffffe, 0x8, {0x9}}, 0x18) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000200)={'veth1_to_team\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x400, "69ed4fd067369c1757e3e3a4edd7b034b0a453fd8acf24622f1b1b225fbcc2cc52cfa199b4c5f88e18d8c2b201cf27a825e7f9ae81636107b32043a9a05d712738912b8db12d8a1551011a598ad33bdcdc6fad76d652a0c5ca09c9c77a7fb1ca2b309b8638090d9f12a31c3a276ac6ce18d6fdcbbe560eff875ba7e3bdd2df0b"}}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f00000002c0)=0x8, 0x4) 23:25:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200)={0x1, 0xffffffff}, 0x8) r3 = dup2(0xffffffffffffffff, r1) dup(r3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a86c4ea5dbb277e1bcdfd81fa8000000", @ANYRES16=r6, @ANYBLOB="010227bd7000fbdbdf2509000000480005003c000200080001001d0000000800030000000000080003003a0d0000080003000400000008000100020000000800020006000000080004000200000008000100756470004c00090008000100e9000000080001001f07000008000100060000000800020005000000080001000400000008000200030000000800020000000080080001000100000008000100f8ffffff"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420000a77, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00@\x00', 0x101}) r1 = socket$packet(0x11, 0x20000000000003, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @random="e09bf7dbe39f"}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001400)={'lo\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x1420000a77, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) [ 1078.252903] input: syz1 as /devices/virtual/input/input1917 [ 1078.283322] device lo entered promiscuous mode [ 1078.293285] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1078.303474] qtaguid: iface_stat: create6(lo): no inet dev 23:25:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x400) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1801}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 23:25:17 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), 0x0) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) getgid() pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r6, 0x29, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback, 0x80}, 0x268) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x4794, 0x4) r9 = timerfd_create(0x2, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r9, &(0x7f0000000140)={0xa0000000}) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r12 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r12, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11}) [ 1079.106565] device lo left promiscuous mode [ 1079.110961] device lo entered promiscuous mode [ 1079.118709] qtaguid: iface_stat: create(lo): no inet dev [ 1079.128332] qtaguid: iface_stat: create6(lo): no inet dev 23:25:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200)={0x1, 0xffffffff}, 0x8) r3 = dup2(0xffffffffffffffff, r1) dup(r3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a86c4ea5dbb277e1bcdfd81fa8000000", @ANYRES16=r6, @ANYBLOB="010227bd7000fbdbdf2509000000480005003c000200080001001d0000000800030000000000080003003a0d0000080003000400000008000100020000000800020006000000080004000200000008000100756470004c00090008000100e9000000080001001f07000008000100060000000800020005000000080001000400000008000200030000000800020000000080080001000100000008000100f8ffffff"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') [ 1079.424948] input: syz1 as /devices/virtual/input/input1918 23:25:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fcntl$getown(r0, 0x9) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x21540) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000140)={0x2, 0x8001, 0x8, 0xffff, 0x5, 0x7}) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:19 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xff15fdc5a8e926ba, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:25:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/ipc\x00') lseek(r3, 0x2, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) getpgid(r4) ioctl$RTC_UIE_OFF(r1, 0x7004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x20c, &(0x7f0000000000)=[{0x6c, 0x0, 0x0, 0x100000}, {0x6, 0x0, 0x0, 0xfffffffa}]}) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0xfffffedf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 23:25:19 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r4 = dup(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r5, 0x0, 0xb10b, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000140)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) fcntl$addseals(r7, 0x409, 0x8) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001e005f02", 0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x483e61478c237e07, 0x0) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f00000000c0)=[0x78, 0x80]) 23:25:19 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x10000, &(0x7f0000000240)="9fdac0dc0f0000891bfb036fbae800758bae", 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000340)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f00000006c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x100) ftruncate(r4, 0x2081fc) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, "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", 0x1000}, 0x1006) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200102}, 0xc, &(0x7f0000001480)={&(0x7f0000001600)=ANY=[@ANYBLOB="4b78a195e8e83f7c3459d067ec89daa86835d210e426a0c440342c79284e5a495b952fafe55d85fdc7ff68f3f53f05358613f92cbe1e4db872053d0fbb68d93feef93a3a137902d7156bbcc9", @ANYRES16=0x0, @ANYBLOB="005046d08439d65b0f1104000000"], 0x3}, 0x1, 0x0, 0x0, 0x8914}, 0x4000000) open(&(0x7f0000022ff6)='./file1\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) futimesat(r8, 0x0, &(0x7f0000000200)={{r5, r6/1000+10000}, {0x0, 0x2710}}) creat(&(0x7f0000001540)='./file0\x00', 0x10) creat(&(0x7f00000002c0)='./bus\x00', 0xcf) r9 = getpgrp(0x0) syz_open_procfs(r9, 0x0) 23:25:19 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x3, r3}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 23:25:19 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) eventfd2(0x0, 0x0) open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\xa31\xb24\xa9BNo\x19\xc3\xe6>RL\"\xc5f+o\x86\xb9M\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&$\xe0\xfc\r\x13yg\xefX\xfbk\xbb\x15\xea\xa4\xfe\ru\xed=~\xb2m\x1e\xcd\xb1e\xba?\xde\x1b9\x9d9(\xfc\xb1+\xc0\xd9\x97\xd8\xdf\x02\xb7\x95\xf2\x19=c\x13\xc2D\xe35\xd4\xbe-\x91\xb0M\x12ib\xc6\xda!\xd3t\x96|\x7f\x19\xb7\xfe\x87u\xe1\x85\xe6\xcb\x0f\xff\xc2;\xbc|+\x89\xa6/\x04A\x91\xeene\x10\xe4\xa2\x00\xf4mr\xc8\xe7\xd4R\xb5\xf8\x1a\x8d\x1c}\xabI\xa3\xde\x96\xb8%Sf\xae!q\x133\x8b\x9d<\"\xb8n\xb2\xbf\x1d\xdb\x9f\x12O/a\x90>\xc6\xd81O\xae\x00[\xbdU\xbe($\xfb\xff\xe3f\xdb\xd4\xab\x8e\xcfu\xf5\x89\xfc\x97\x82\xb7\xa9f\x7f\xbd\bINz\x86\xael.\xa7\xcb\f\xfa\xc3\xcax>\xf4\x10\xbf\xb9\xe1\xf8\xebI[F\xd5\xa4\x85l\xc2\xcfn\b\x00\x00\x00\x00\x00\x00\x00y;W\xed$\xdb\xd8J\x8b\xc5') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x100000000000002) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)=""/99) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x318, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = dup2(r3, r3) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000010) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000180)={0x1000, 0x2, 0x6f}) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) dup(r2) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r6 = syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000000c0)={0x0, 0x1, 0x0, r6}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="043d0f0505c8f2e634015621431d258be979bb639ecc648ff41775100ed98b51bdd3cf5fbe440fbfccdd11d4757eb2325e1cccb7a99ad3bfb3d47b601db9df7aa4f574174daa3a7710f10d343c7c97e9ac53a9f78e2b89d9b3617cc47a1b8f751ab8839316a024e17ee31b4030262c0823143cdb29b394e6f9c7acbae7ab4002524e90db7863ce34aa6c35167bf13796ddcdd7359eff0f7ea1fa12485bc864551c9fa2d0c133f4b636e1aacb91ee9f03124bcc7dbbc04f76f3e565388a84be34ea3ca6f8d3f0330cfe0100000000000000ccf3514092a16c297e2f81614f7759ed323001c2e9d7841524e4c28a06bbdb460b1ca1d01700808b1b16cdf8e6a9fe4edf9f49896c98c775af70ab560a42f2307faba1ff177d56572fcfacf70ec9d3c81b12330fafe9bf44bf7b9f4b4bf3338573b5c5a7a97f1209d890c98fe77edf9976928eb9a181aa5a694db3d3bed7917587adbb4b4ec7d09f95021d52391271bc50db4d6cf3ea5c8dd29b212134e37ae1939af1a37f8f54a4c37793cc599df04a853b5881ac4e2e21a0a3f017b93b60c410aa766506e83ee5e13dbb1c5ec37fa398ae50eef5982c9f59a5b183eca7ed0e4c224d2d379ef0bf9b4e2937279d90aabc37bcfa9a4eae4c38f5a018faa72020264e0c64ab07561026d8d6cd40c23cb76ff68f7742fd42a2f6733826cb8b6af324f9c68d36910067d1010787f8d40f2a1b0b569895eab5cf307d528d2028ff6e808da918c278051abe97cfd452315f74f808d9e4391294358f53b074e48243ffd8ee264effb64e83177b47b8b54cf46eff39f5fec960abed26b5c164a6fcaf12e2722015d0a8a5e813bdba8d07cbf5760f88b56b418369fb6a675decdef5034239259a5abe809064ca2276aaf1e8255599"], 0xc}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 23:25:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x202082) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x8010, r1, 0x1000000) unshare(0x20051100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x0, 0x2bb, 0x101, 0x97, 0x4, 0xfff}) [ 1081.302899] input: syz1 as /devices/virtual/input/input1919 [ 1081.325824] input: syz1 as /devices/virtual/input/input1920 [ 1081.404670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 23:25:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18800004}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00012cbd7000fedbdf250600000008000500010000800800060009000000080006000c0b0000080005008100000034000300080003000300000014000600ff01000000000000000000000000000114000200626f6e645f736c6176655f300000000014000100080005000400000008000b007369700030000300080001000100000014000200766c616e30000000000000000000000008000400080000000800050000008219"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000d000) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x14, 0xe, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x2}, [@typed={0x8, 0x66, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000080}, 0x30) getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f00000000c0)) 23:25:19 executing program 4: epoll_create1(0x80000) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x585a81, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = gettid() openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x20c600, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000001) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000001c0)={{0x3, 0x0, @identifier="494f148388e325aac6d83675af17da13"}}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x1e15, 0x2, 0x8, 0x7}, {0x4, 0x1, 0x7}, {0x4, 0x5, 0xaf, 0xfffffc01}, {0x3f, 0x0, 0x8, 0x9}]}, 0x10) [ 1081.446617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 1081.474202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 1081.505197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 1081.529366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 1081.540123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 1081.557777] input: syz1 as /devices/virtual/input/input1921 [ 1081.579847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 23:25:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8441fb813ae2a657, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x17, 0x7, 0x1, {{0xa, 'vboxnet0,$'}, 0xc5a}}, 0x17) fsetxattr$security_selinux(r0, &(0x7f0000000380)='security.selinux\x00', &(0x7f0000000180)='system_u:object_\x81:var_spool_t:s0:\x00\x009\xd5\x87\xdb\xeb \x11\xb2p\x8a_\xcc\xc3\x86N\x18e\xa3\x13K$1\x97\f?\xba9\xc8\x05\xad\x1c\xf3J\\\'\xfc\xf6\x0f\x1a', 0x21, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@dev, @multicast2}, &(0x7f00000000c0)=0x8) 23:25:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500), 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080), 0x4) fcntl$getflags(r0, 0x3) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x8000fffffffe) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) r4 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x1, 0x2, 0xd95}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xffffffffffffffb4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r6}, 0x14) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000040)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r6, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) write$selinux_load(0xffffffffffffffff, &(0x7f0000000e80)=ANY=[@ANYBLOB="8cff7cf9080000005380204c696e7578160000003a0000000002ab000082570040000000000000deecffff00002c01000098030000000000005cc82d01ffffff4a1605b73b843959dcd4fbbcdec78c143aef12b8f3fee7bbdd7b0736bfbc0aa67355a765eebd39bb738cdecded722c7cf4199ce6f79b647b5e6da727c9816bca7d72263ca2b4555175772fac124aaa0c000000ff3e68d55d908e467b7f0a520d9cbfddbfa4588e7b329cbc2cee091dadede901821a0e76db61a461ca2919ca64492a43d7337be15b51e3000023e6189aa25cfc0cce0e0e30876d4859cd413f4169d18caefa3c6c756e7cafe8d85eedd9d100e5ba7f71e251ee5a41eac8ab6dc117ac27fb6c90b58c167615643cdb23e37e5b671780d8e9645778e48f44daadf592eef540fcf2abec0181fa303c8049ba2fef9666cd62be59bf7c1c09601ea6d8b500000000000000845b908e4860850711e3ee28c7bde54dd0aee133b191763cdef3c9dc254e001d23b1ab2e759c837455967788de5f185c0c84b379b4b210e390e8f592b3a0f973f41bd457abb852442496b6f119430387dc25ca4e0f4ff9b3fb00860d75a8d2c5151a9a786de7ab4f1854b45522e2c9e75451884d5b2f56d4ddcec9ad357d1aabeeaf1fa0037a7f56bb9642891c4b59e769228ead020a9d9f8ffe361cb9dc992a499ea28906f721a311117ebf54a5e879e37114068b1009cc839dae6079303ccc83aec1f299466fb5b99d20a3076133db000f99c6b3b51cf5d8c71fcd9652bccc00000020000000000000000000000000000000000000daeb0184101dd9525b79ac3859e214c65ee3a97a4167072669d302bbd186f0767ec36f04c5d4c977fb066058ce3fbc8ea14bb39001f8827a3ec9478659de46f837c52b7e80bf514ba7100f4442ff2100aa774dca6989e624cf4478c0d864123300000000000000733460993d2130eb48f80f50a3b0f04907e9c53feff7ff66572617848b194e242934599e5c094ae3ad5eaf0296e2172a635cce33395895d4abb9f18f8eb8953ba0e69c830008000000000000f2cab973fbf3880f074b1d8ee0d0660ca44ad3cbec5401b7dc2e0c297cd6628e257a63008c78aa177d6a1e615e2f809320d8bce61d65ba8307267c8ac70d2c00000000"], 0x334) sendfile(r2, r3, 0x0, 0xa5cc554) [ 1081.600134] audit: type=1400 audit(1574810719.453:95): avc: denied { create } for pid=1711 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1081.652123] audit: type=1400 audit(1574810719.503:96): avc: denied { write } for pid=1711 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1081.695020] audit: type=1401 audit(1574810719.543:97): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F813A7661725F73706F6F6C5F743A73303A [ 1081.726599] input: syz1 as /devices/virtual/input/input1925 [ 1081.729738] audit: type=1400 audit(1574810719.583:98): avc: denied { read } for pid=1711 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 23:25:22 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$cont(0x1f, r1, 0xff, 0x20) 23:25:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18800004}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00012cbd7000fedbdf250600000008000500010000800800060009000000080006000c0b0000080005008100000034000300080003000300000014000600ff01000000000000000000000000000114000200626f6e645f736c6176655f300000000014000100080005000400000008000b007369700030000300080001000100000014000200766c616e30000000000000000000000008000400080000000800050000008219"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000d000) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x14, 0xe, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x2}, [@typed={0x8, 0x66, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000080}, 0x30) getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f00000000c0)) 23:25:22 executing program 1: unshare(0x24020400) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) signalfd(r1, &(0x7f0000000080)={0x8}, 0x8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x10b201, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000400)='./file0\x00') 23:25:22 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000000)=0x7) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000240)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x8, 0xff, 0xff, 0x80, 0x0, 0x7, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x4090, 0x6, 0xfffffffe, 0x1, 0x9, 0x101, 0xff}, 0xffffffffffffffff, 0xd, r3, 0x2) fcntl$getflags(r5, 0x202) timer_create(0x4, 0x0, &(0x7f0000000380)=0x0) timer_gettime(r6, &(0x7f00000003c0)) timer_delete(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x20) getpeername$unix(r7, &(0x7f0000000180), &(0x7f0000000200)=0x6e) tkill(r1, 0x1000000000016) 23:25:22 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) eventfd2(0x0, 0x0) open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\xa31\xb24\xa9BNo\x19\xc3\xe6>RL\"\xc5f+o\x86\xb9M\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&$\xe0\xfc\r\x13yg\xefX\xfbk\xbb\x15\xea\xa4\xfe\ru\xed=~\xb2m\x1e\xcd\xb1e\xba?\xde\x1b9\x9d9(\xfc\xb1+\xc0\xd9\x97\xd8\xdf\x02\xb7\x95\xf2\x19=c\x13\xc2D\xe35\xd4\xbe-\x91\xb0M\x12ib\xc6\xda!\xd3t\x96|\x7f\x19\xb7\xfe\x87u\xe1\x85\xe6\xcb\x0f\xff\xc2;\xbc|+\x89\xa6/\x04A\x91\xeene\x10\xe4\xa2\x00\xf4mr\xc8\xe7\xd4R\xb5\xf8\x1a\x8d\x1c}\xabI\xa3\xde\x96\xb8%Sf\xae!q\x133\x8b\x9d<\"\xb8n\xb2\xbf\x1d\xdb\x9f\x12O/a\x90>\xc6\xd81O\xae\x00[\xbdU\xbe($\xfb\xff\xe3f\xdb\xd4\xab\x8e\xcfu\xf5\x89\xfc\x97\x82\xb7\xa9f\x7f\xbd\bINz\x86\xael.\xa7\xcb\f\xfa\xc3\xcax>\xf4\x10\xbf\xb9\xe1\xf8\xebI[F\xd5\xa4\x85l\xc2\xcfn\b\x00\x00\x00\x00\x00\x00\x00y;W\xed$\xdb\xd8J\x8b\xc5') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x100000000000002) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)=""/99) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x318, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = dup2(r3, r3) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000010) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000180)={0x1000, 0x2, 0x6f}) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) dup(r2) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r6 = syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000000c0)={0x0, 0x1, 0x0, r6}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xc}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 23:25:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500), 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080), 0x4) fcntl$getflags(r0, 0x3) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x8000fffffffe) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) r4 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x1, 0x2, 0xd95}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xffffffffffffffb4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r6}, 0x14) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000040)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r6, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) write$selinux_load(0xffffffffffffffff, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x334) sendfile(r2, r3, 0x0, 0xa5cc554) [ 1084.290927] input: syz1 as /devices/virtual/input/input1926 [ 1084.321564] input: syz1 as /devices/virtual/input/input1927 23:25:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$clear(0x7, r2) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r2) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) r4 = request_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000880)={'syz', 0x2}, &(0x7f00000008c0)='syz1\x00', r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='cifs.idmap\x00', &(0x7f0000000900)=@keyring={'key_or_keyring:', r4}) r5 = gettid() r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x1c) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) wait4(r6, 0x0, 0x80000000, 0x0) write$selinux_load(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x10a) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x1420000a77, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000280)) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r9, 0x5502) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r10, 0x5502) r11 = dup2(r9, r10) write$P9_RWALK(r11, &(0x7f0000000940)=ANY=[@ANYBLOB="090000239d97509b974de53f1e8799b665006f02000000f43a3b2f0b4fbb873bb631b471ec918f0ed3579cb6dacb20ef41121ca5cb080441c4a40cfff7725576aa33540db0975e3d86c6e0b1e657f85abf16b59662d8c0f382b280393f8e670ac87310a5a473a8776e9a5e"], 0x9) ptrace$cont(0x9, r5, 0x0, 0x0) [ 1084.404580] audit: type=1400 audit(1574810722.253:99): avc: denied { create } for pid=1752 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:25:22 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000001c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce', 0x10f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1084.450701] audit: type=1400 audit(1574810722.303:100): avc: denied { create } for pid=1749 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1084.518970] audit: type=1400 audit(1574810722.373:101): avc: denied { write } for pid=1749 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1084.561927] audit: type=1400 audit(1574810722.413:102): avc: denied { read } for pid=1749 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 23:25:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500), 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080), 0x4) fcntl$getflags(r0, 0x3) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x8000fffffffe) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) r4 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x1, 0x2, 0xd95}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xffffffffffffffb4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r6}, 0x14) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000040)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r6, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) write$selinux_load(0xffffffffffffffff, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x334) sendfile(r2, r3, 0x0, 0xa5cc554) [ 1084.646825] input: syz1 as /devices/virtual/input/input1928 23:25:22 executing program 1: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3ff, 0x800) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000020009) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGICOUNT(r7, 0x545d, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) 23:25:22 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x3f) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008b557fbc20b4ca0b", @ANYRES64=r1], 0x18}, 0x0) close(r1) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/devCnull\x00', 0x80000, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000280)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8005}, 0x20) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdee], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30b]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) r7 = fcntl$dupfd(r5, 0x406, r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000200)={0x2}) close(r0) r9 = socket$unix(0x1, 0x5, 0x0) close(r9) 23:25:23 executing program 0: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x80000, 0x8) sendmmsg(r1, &(0x7f00000089c0), 0x3ffffffffffff52, 0x0) [ 1085.188093] input: syz1 as /devices/virtual/input/input1929 23:25:23 executing program 0: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x80000, 0x8) sendmmsg(r1, &(0x7f00000089c0), 0x3ffffffffffff52, 0x0) [ 1085.253881] input: syz1 as /devices/virtual/input/input1930 23:25:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = dup3(r0, r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x3, 0x4) [ 1085.347135] input: syz1 as /devices/virtual/input/input1931 [ 1085.488067] input: syz1 as /devices/virtual/input/input1932 23:25:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)) fchdir(r0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) [ 1085.533328] input: syz1 as /devices/virtual/input/input1933 [ 1085.570601] input: syz1 as /devices/virtual/input/input1934 [ 1085.681873] binder: 1829:1830 ioctl c018620c 200000c0 returned -1 23:25:25 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420000a77, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioprio_set$pid(0x0, r2, 0x4) tkill(r1, 0x1000000000016) 23:25:25 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xd, 0x0, 0x100000, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000900)="0a4e51e607e45bd7abca676c3d385f66f9e7568b739c15a4d4f8f7bf0bb55ad21c971a087307f830bcff3bc3284415d83168e34a3ee3f937b6b9fa1298e24bd3d97d91bbfbd3fefe018c7ed98397c5a85a855da645a107a1eb0000000000000000000022bec3", 0x66) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1a) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r4}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, 0x0, 0x20004894) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x4ba, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:25:25 executing program 3: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x800, 0x0) r4 = socket$inet(0x10, 0x80003, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b00") r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000380)) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x342}}, 0x800) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @local, 0x80}, 0xa6b1bf4900b020c5) sendto$inet6(r2, 0x0, 0x0, 0x20000811, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0x7ff}, 0xfffffffffffffe85) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 23:25:25 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x3f) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008b557fbc20b4ca0b", @ANYRES64=r1], 0x18}, 0x0) close(r1) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/devCnull\x00', 0x80000, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000280)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8005}, 0x20) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdee], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30b]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) r7 = fcntl$dupfd(r5, 0x406, r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000200)={0x2}) close(r0) r9 = socket$unix(0x1, 0x5, 0x0) close(r9) [ 1087.290630] input: syz1 as /devices/virtual/input/input1935 [ 1087.330728] input: syz1 as /devices/virtual/input/input1936 [ 1087.413001] input: syz1 as /devices/virtual/input/input1937 23:25:25 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4100060}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000200", @ANYRES16=r2, @ANYBLOB="000425bd7000fbdbdf250100abd2a37ae5eba400000000000002410000001000137564703a73797a31000000002ae84441fc2dbfd63b5f400e1fd3f5639cf2f869c4e52cf2b8124e20d45ce36818e1c853edb329fa8d5c7418f14d607e1633c5ef5a42fa3df0bf553d0c47b3d04b9c55"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ptrace$setopts(0x4206, r0, 0x0, 0x11) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$P9_RLCREATE(r3, &(0x7f00000001c0)={0x18, 0xf, 0x2, {{0x28, 0x3, 0x1}, 0x101}}, 0x18) 23:25:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x50}}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x9c}, {0x80000006}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000180)="dc7574718de42163f2987137c9238b9313606d90af650092830661f14c5444084a7e1f226fe3420448b0a8500b59e935b9ca2afbc2d9881d08137f918f841d50a870c65c04e33d0a15b5d7b0fb93a293f7d0cb71c22eb1c31b46dbe0f6a53d57167957d3057c282c3ff79361eb9a2da70ae5", 0x72) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) ioctl$UI_GET_VERSION(r6, 0x8004552d, &(0x7f0000000200)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) mkdirat(r7, &(0x7f0000000140)='./file0\x00', 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x400000000000254, 0x0) 23:25:25 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000100), 0x0, 0x7fffffff) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0)=""/1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x2, @thr={&(0x7f0000000300)="311c3edf7e6dbb675d98653da39a06d7dd27e015799dab265c266a282425b0cd8388e67988fc28884c5e1316a4b5595fcd04c24b2823fe11b133a4759cb4112a9f62a0726e14231338640c5afc8734c4638c5ec9aa6008d4cd8c622ed84e8d6555bc96dfd3b5d78ac93b36376dd4db7ef65dfb308cae74ec896ac67999b76f8aea2cbac2b0ecb58cb675f04dd95a292d45ffbf009f641f5a6bb7bfc9cb349a87f981f49498b8816a18c6bf36f4d89cc7dfb543b8c7c335126ea7493aec60939cdc675f2626e332e2", &(0x7f0000000240)="7a43b63046608285c3827ccf2c2260f574633ed069d26d4491a9a06b81cf23fba70a48a0e66daf4fbe9d24f39f6602f140d6f1b083792ae9044702d4f2e893bfba42b93fa1bfe57d53a787c0416720a26ccb97fdf45fa0d02517985641151f1f2604c0537759dccd40d6fa"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioprio_get$pid(0x1, r3) [ 1087.512276] input: syz1 as /devices/virtual/input/input1938 23:25:25 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) pipe(&(0x7f0000000000)={0xffffffffffffffff}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000600)) r8 = syz_open_pts(r7, 0x0) read(r8, &(0x7f0000000080)=""/11, 0xb) fstat(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r6, r9}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20100040}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="500200000d04000226bd7000fedbdf250c00000034027e0008000300", @ANYRES32=r3, @ANYBLOB="73f75e62282d149e796c120616e429a8cdb65df01aecbc7a24566d1b8b15884a7b4476f99653b414be6b59faa02c9c0d9dd190ce20658e2053724061a36b3a485c6cb5f5cc44d561352d7c83a0a0d369831d51f25eac96a7ac456f0d1962e455fbb9c282de27de0dae5b3f7a05ad5d82fcf8cb2c739a8e08000c000004000050006b00e27809375022cb0d8f02621d50b51a3f7b7b05f14c0ba9ef45c2648f7ed2c4c5445f2104fa7b24712fc1811014d7f63c3fc6590aa87f8e3c8b8131d3c88ec202fb001b47ce5c01da87d60d000800920081000000740010007cbec03b0138275a499e880a02d1b1562ed87fefbc86370a5a55dbff55280d8835e86b05cf41de65728efe8a4d3cc3cfc447445f8da58960f00640d940a68645c8a09d2832d394589c26f7c98b527f0c1a1ad6c8628e3afd95678d5b2cb594316430ccecec464ed43b5b620412e58a7a4aa25df17b55a579676540fa5e6358f25257cc706219f02fb7a975bbedb557ec8009638c31adb8809c10a27970b92709b2d8bba39b308baa6c65f19b87efca3aa3153faa0ff237023b812e563def2d646806ce6e0c05ee7bc3c95478b521bd19009169c0f65c2eedfd6bc58321a2cb2532df259e17faa6fd116adcb53af113fa6d5ce5a839b40a2e446da4fe5d2f5d818de003d7f5096821d355656c2602963c95d93522f3731feb0e222e2e75e1cd86dae806965408008e000100000014008700fe8000000000000000000000000000230008006c00"/556, @ANYRES32=r9], 0x250}, 0x1, 0x0, 0x0, 0x4}, 0x81) [ 1087.602660] audit: type=1400 audit(1574810725.453:103): avc: denied { create } for pid=1861 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 23:25:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) dup3(r1, r2, 0x0) close(r0) [ 1087.673256] input: syz1 as /devices/virtual/input/input1939 23:25:25 executing program 4: r0 = epoll_create1(0x0) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) 23:25:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x4) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect(r0, &(0x7f0000000280)=@ethernet={0x1, @local}, 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="7311400000ef45e8441ec9ac90e8d76108be3407df70c0452a"], 0xff86) close(r7) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$RTC_PLL_SET(r8, 0x40207012, &(0x7f0000000300)={0xfff, 0x2, 0x40c, 0x285, 0x4, 0xfffffffb, 0x7}) socket$netlink(0x10, 0x3, 0x6) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) splice(r11, 0x0, r12, 0x0, 0x1420000a77, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000240)) r13 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r13) keyctl$clear(0x7, r13) r14 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r13) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r14) keyctl$clear(0x7, r14) sendmsg$NET_DM_CMD_START(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x196222000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 23:25:25 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xd, 0x0, 0x100000, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000900)="0a4e51e607e45bd7abca676c3d385f66f9e7568b739c15a4d4f8f7bf0bb55ad21c971a087307f830bcff3bc3284415d83168e34a3ee3f937b6b9fa1298e24bd3d97d91bbfbd3fefe018c7ed98397c5a85a855da645a107a1eb0000000000000000000022bec3", 0x66) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1a) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r4}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, 0x0, 0x20004894) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x4ba, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1088.004445] input: syz1 as /devices/virtual/input/input1942 23:25:25 executing program 4: rt_sigpending(&(0x7f00000000c0), 0x8) r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/166) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x204100, 0x0) 23:25:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="00000000000000000000000000001000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r3, 0x29, 0x4, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) fcntl$setstatus(r3, 0x4, 0x80000000042c00) [ 1088.120604] input: syz1 as /devices/virtual/input/input1943 23:25:26 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x1c468026, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 23:25:26 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2081fc) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x20000) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:25:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ftruncate(r0, 0x9cf) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 23:25:28 executing program 5: r0 = gettid() r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/156, 0x324}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) sendmmsg$inet6(r6, &(0x7f00000051c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x1000, @remote, 0x2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)="7b4af78ed87f1ac465ec2573276a82176b6607cf794c8f606be845785ccae1e3906f6c774993d73f580475135e1261137d15aa9c0d536532083c2350c0c92a321f8c90f38993094614e73a7f07cc642086d50d08eff9e5795716fd1d341eeafe", 0x60}, {&(0x7f0000000300)="395e784d8f8fabadd92afdee5ff214148b4ed6e905f24d043569684da50447f0517b1ad1be21c493f92371bf320622cf09940568c3da9e39c2a4f8aa03c1537f3b4b4f9b1194ca640d4b5912300c604a80167f949eb2ab9d218ef2a2e941afd985f9152c04e53e632d5ef6b1aeb14966971ea6305a5220092c1a417f45e23833cfb9fa020fcafc5bd69ffca509ea3a31dba71551d248e7c14b5c3f43b78d5f7a2158034f53", 0xa5}, {&(0x7f00000003c0)="20ea16206b13b0440433dfbdaf99e181938406bc21f87c92b43234fedaed137b2800107599e81eb9ce5a622213e39f2cb27d526be6969856a7de6332d28497157ad222feae2ddb2b", 0x48}], 0x3, &(0x7f0000000480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hopopts={{0x38, 0x29, 0x36, {0x16, 0x3, [], [@ra={0x5, 0x2, 0x1}, @pad1, @pad1, @calipso={0x7, 0x10, {0x9, 0x2, 0x5, 0x3, [0x8]}}, @enc_lim={0x4, 0x1, 0x7f}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x2, 0x73, 0x0, [@dev={0xfe, 0x80, [], 0x11}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7bd9}}], 0xa8}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x9, @mcast1, 0x3}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000580)="c1cb8acf9af4cd5f392c0274bad08e3fcc049e588fc529f0d1365508c42507d3bacee42fb2d5e4f0e4999820352c198b1b9c9177b9aee1376b8b3a84fe5dffc95d6b1aa8926b6d2dbca294f154569ecf1835f2da6cc338c317563f5146b6cffed7", 0x61}, {&(0x7f0000000600)="b365c5794d8097d2316f75d7817478d3d110df517b44f38a74bd4b57aa2cdd3b5ae30ad3d5335bbf709d1755dcf3afda33902c18aa4106b9198379f8246a04f597e05a84e5401841b0ee7dc07aa2ba34efcd580b6dff719a8245c5593a3566a65b6accfc3eadd460ab0b3627629cec873881f25801eb9113849596978a5fdbbb8ca32d5033d2bfe17623298a77354f13cfc190eaaea9717dc7d95728976f6727bceb97f944e7424735c8f4da754c1961b89fe61b646f956bc25fd4d52f1d7fb92a4ee6ee83ca5ac7c7f72c29a3c362e99776b0832aa73e90ca38ee6c0b56e7", 0xdf}, {&(0x7f0000000700)="43ac9b78d794972e6a5f13de81993c301e18cade3187943d974ea89d2e080771a9762744b43603f56719656ec65f100eb7e582799ad8517751ae0a502d73d6e0dadbac52e4f02f7da8868885d4f28c2d2bf19520909b02272b77d0fe4cb32a86f2f461cb2c1cda85962a3d289ee3b247793b0678c41ffed1e7f9522ed5ee33c9bb6c8796ff820f1c2de413088fc8c96e4e6b29f02b26cc92a1cf7e097a4fba0a06896d7cbdb31132c271c300dcf7b02463fa410a0097f3d096fccb6095bcfff2ea17ff7d4bd3b3b1a715", 0xca}, {&(0x7f0000000800)="939ab5b4316e92313a004780f3b9aa1f674cd47e81ebadc8f8e2cd59412857a0dbd2934639a699dc5d6a7c615889bcaeaa236b263dc08984186f182a2475b9c544ea606150c3e5bf41955d8f2b2b9ead1c8e0a905844cd52eb57227d645247f6becd31617aad7d4d795c0ac921e7499d7934f5fe9c7f1b99d0056b036c4b9cc8e722b7184567e7d6e34e2e4706f1a32e675efa5ae8942912e5f1a1f643acc3d9b977624a094aa01c73d3aa836ed2f508514878c0c6bc9e4bf68e73a9686dcb02a6fe131b37b17a2074405b73d710f143eaacd342239f84af9bc4e3e77ec22ee4aee0e623b0cb7435d7378b2be6dcc7f574d7", 0xf2}, {&(0x7f0000000900)="3a5a4cb0857091119e8594848958fe57177018cd18790be14aab504dfe66b2f2df43f3dc45376fe390a53157e83e2d7f6c7cc04c8d7865e3a003132d7fffe3790b667b53819407d98e", 0x49}, {&(0x7f0000000980)="6bb456d4e632074bf2c640c193dde182308259a537052cf40a89370578440065bc7425f4c7da38154a2cf8ad81d101200cb31fe5450744157088336ce54a3335efe5782843bdab6408f3d70ec3337edbb16563b4bd3e7b6d12b88e5be4733d6a987c1325c6c5b1a62388ef9fe0dbcbe12a20d8714effd71f683ac4e8dd", 0x7d}, {&(0x7f0000000a00)="5f005e434056769c6edf22b3b99b3fd887d9eec889956a4ff2", 0x19}, {&(0x7f0000000a40)="5de4e3d018d7c4d7442f1fb2c3f05bb87d0fe10e34d2db847bf891105cceb5680f7aaba8bc5145b0c2ff794a826d6ae43f7374c84e45c485ed16f227e9465d1fe9da7319bc4cd2dbe30b6abf6ee706eeec0af5ec62eec89afb2a30d27f50ea29e37dfbc351e2fa25840cfd6f241890d2392395d07056cc55523205bafc99dc856b86707c38e4b4c83768402d3c8a7df1af98ac4c3a3af511a290d21ae2a46d200422add3b353ecc67e2165af91d2e0bd2993f456a1162239b2c7d61a7c32174dc88977683b12b626997c7f11caa2e4b9f99190cb7528d557f319b009c9a0ed41e7d69998128b9b86ee9b78332a315cab317a12890e5e9dde5eda277b", 0xfc}, {&(0x7f0000000b40)="6d4f8282628f9f1e55af5f79b97e39efd3a08b4b41cb73bf590156151153ba33077b56c858717fdc2525986b64bbe03c885d17ccf4217c18014e0df607be2bd6d8af421a72db6a7c75000d8b", 0x4c}], 0x9, &(0x7f0000005340)=ANY=[@ANYBLOB="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"], 0x1f0}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000d40)="58cea81f286fade3c66a001e33087a2630bbd36ee3ead7940b2a448564ab6d0d97e1ef948b67ba628d63dd60934887", 0x2f}, {&(0x7f0000000d80)="4f2cd397cdf82cfa74e64499ac6e96f911600bf7eb096c", 0x17}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="6eb9d961c0c4a36b863f16ba14bb2aa8aa046660a1df0cfcaddc8454dac95017d68044cfc2bf23cd27bd540de773774293d2f94bdf39bd5a1629ef9ed7ad9ec0ed2ba0d7c0751862a394f1f519912232dce6e933b51d440188f265147cf422a0b6c3e3eb1ac1e61133423332d0f800100658c7ce13785631182faaf0e1b5adc387b38ca04965b2b2f4252dd311994985c81933f3e2d07e4718f0fe4ab6e58c7d889778b414ebd6b6218c3551908939450851663f8a", 0xb5}], 0x4}}, {{&(0x7f0000001ec0)={0xa, 0x4e24, 0xd91, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7ff}, 0x1c, &(0x7f0000002380)=[{&(0x7f0000001f00)="001942767d9a2c40d65e963903fc15a3c6e1943dc773fd9536cb19c9b9576215a85e52a8067ac8369c4bf8611eddbb2828b15adf52c2302da4b0dbc4804f8c9cec8c62e5c7cc5f28204a51825486ada9d8ea7a50ed4849f0e1be13f1afd6a124c78faee0b3bfdf024466162861e4b943f58a05d384c72f6e55cfb9155f611e3fd9aa720b57610faa8dd47dbbce3444cb018a264697fa865fa169ecd705ed04ff2c6b9fb6bf32a1fdbecd349539c148d1c8e242fc2eb77faf5219727ecefdf0d52fba35b44c483f3132ec7f280c8b8c6b2882d9de22da9a147e757d", 0xdb}, {&(0x7f0000002000)="ae319c5444be123505778b0b4722fb0383d9f1e75ab2d8733ca8b23341cf323ceb4abafb8730931d829d80a8c6ace62067da92b088d3ef7202aab4a2f4ac08896c1032e30a6ca065076fc04786c52672eca51d0e78b0e816353700a3ecae325fbae1a87050f615571e4c3ceb4c9fa66917b283c28478475f9d7e0bdf4232ef8a1293c5f0189a9b46b5db4db60c", 0x8d}, {&(0x7f00000020c0)="bd28f61fa856907345fe5b49632f19f8e15db42604ba423da1902f1972259c9f78d85495d51ab65bc7704c6ce17969abb998a6cbdb3e1c183f5621618cbaffc24112e79fe3e249912cecdcf78a8fab62b1e6a8768002ea59585670c831d42162eee6eec0dc6891333173e6503181b0fef1a0e81ca47995e5be852f3f", 0x7c}, {&(0x7f0000002140)="41c0e102945455c46afdd48a0461793b2aad74baa7941e3a8bffdcf218e6f3c4576abe5b54440cf9", 0x28}, {&(0x7f0000002180)="7f50270ec4d61fb190773d055c87eab7bf9f79abce95bebea0bc1d4f75f2cc46fa985eb581c4c47da61c83e659400129153d3a6bc89accb2fb3e1d50ca93ade6a49d94ca81fb4417ccc539021374a073dca118452e042ed9745a2edf0e99dbeba76780c5b00c92668748c8aed058aae14953ab820cd4", 0x76}, {&(0x7f0000002200)="0e05567d726b45410bdef374283b65", 0xf}, {&(0x7f0000002240)="9ce71684e8bb9def350017549283211cc9866608211534533c91a0e608a2958097a129947153f320eb7365a6a670ad4905ca19c8ad252add91363fa2c89161cc33c9a0ddbe48630c00b6f4caf22b0e633c741b4560ee1c16607c2d41ec4da14b14876568bba1bf999b3a83fc7556fda4c2d5b93b52f56496b4f1", 0x7a}, {&(0x7f00000022c0)="789108915438de8363fe7833995142483469565fe0f69c692c3d9577387cc65b12e47a2f857b69575241ba5ab9049eb66400cf5c5a95e9b45d560d6ca8b4e487ad826eb06e4d312d8f6b497bebe8d6d6c754992974151e5415d14d21ce9b1460bd7fc6ce4415089c332d2ca7389db1af75fff9b1c50590aa843601dde1c6b6c97a5f051bae9bbfa8318daa845c8bdbbf27ea2ec2fc84958fc7", 0x99}], 0x8, &(0x7f0000002400)=[@flowinfo={{0x14, 0x29, 0xb, 0x423}}, @hopopts={{0xa0, 0x29, 0x36, {0xc2, 0x10, [], [@ra={0x5, 0x2, 0x4}, @jumbo, @pad1, @enc_lim, @pad1, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x58, {0x0, 0x14, 0x4c, 0xa4e, [0x0, 0x5, 0x3, 0x0, 0x1, 0x5, 0x7f, 0x1000, 0x7, 0x200]}}, @jumbo={0xc2, 0x4, 0x8b9}]}}}, @rthdrdstopts={{0x198, 0x29, 0x37, {0x33, 0x2f, [], [@ra={0x5, 0x2, 0x8}, @generic={0x3f, 0xef, "673a3f9a824ff35cb3bbf5846678595df81e09e75972dbcd434ad2c3137240dcf28e675dbfc3b07eb6790e510b9a674e045af5b05fccdef48e7c1cb68c59b51cdace3cc1105c023492e3ad6cfd1a57cbf8e652f2c72fa5e7bfa2ca78ae79b10897b0cfaf5b816345c6572b80a0a3a78561ec41369cf87131e042ffe3eeec1f74b07bca50ec27e8bd58e83d094bb45025f1f9bc6ab5c7714366392f0e055ed269d2cbe5ffaeb1ea02a58bc5a26c137eacd80363991279ccc71b5fde8c00011092dad0d3e65cd5879b14b768b609c6e2be0cc824bd3a25a537d317c1aaa492d95235dccba8e5db35d6f8b86ef7b9a82c"}, @jumbo={0xc2, 0x4, 0x81}, @ra, @hao={0xc9, 0x10, @ipv4={[], [], @empty}}, @generic={0x2, 0x6b, "e7bfe848ebfae5ab6a3b7bc1a5023df1b2f64ef67880dcce5701bbf3c323ac684063f73b87f0acebd1e584e3a03c4327aff7ea135f9453ced1a4633aec4cc8f81b8906b5987de76b9a970953b72a68af44eeec9cb20bb37e579b5440e7db7b8cfcf52c4a7e5c3626337748"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5738006a5c0075d9, 0x8, 0x7, 0xcd, 0x0, [@rand_addr="5f4ca745441bf5c4cfd9326eee7a81be", @loopback, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}], 0x2c0}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000026c0)="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", 0xfa}, {&(0x7f00000027c0)="a9d0d9ab88f426b19c551cd19cdfa0d4210c97dd0edd568f352718e2cc36106f0591661abb6bcf0ce026668888d3566d4696891c007540693219a1c1cee93cdf4759ec1556308e5cdd975b432acd18938c7ce4e341a7bb0016f4592ec5e1018cd49f268c15cc0de07fa5128d5b9a9d7ec435c2e5f174bb78fd822338bdfc09a5bf47e713c8c350892ec98eb9ebaf3f29f950653f191c6ef880bb0d97", 0x9c}, {&(0x7f0000002880)="ff31693032b993a2b0124e967ba513f9d0bbb1f55df1def9bc133269685f45c2f7acc7824ee00add6ef79da57fe3210740ffb15bfd27a17c8f6ad2900188891d4f70a3753436865f47038cc02e6b39eca0abd9974977d17369617776586f017f9c3c38948e18ff95a94eba025b7e5f14f12cea13ed02005e22d027b674278eede453231d31d65d87f4cbb5e7f93c5591275905b241d5b6951f2a82e42982e81ffeb28ab17fe0cf4f72d82094227f25cdb48d71423d94826bf73778974372cd0ee22b869cd51a5c2b684ea8d56956778eabb5e610", 0xd4}, {&(0x7f0000002980)="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", 0xfc}], 0x4, &(0x7f0000002ac0)=[@hopopts_2292={{0x100, 0x29, 0x36, {0xeda9cf8b30722b2a, 0x1c, [], [@enc_lim, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x8a}, @pad1, @generic={0x4c, 0xd5, "817144c67ae631b8488834b3d4a77bdd1d0bb01e4cadd91334d2b2a7886e87d8f7eafa13b26b5be4928a036abc8524b070cba6106bc84c95dcef4cfb8fa42237dcc78845d4cc9957db9e61c27641e8c830d2be0b0d3313d560e716bddedadf5193b03f3fa02c0768ea1db6ce2d7080b256d5aa2f59ba0196ed3b796d98f61c486e1455751ef716655209fd5d240a4c11ac44024350678c94c7a5031850319f08e6eb01b5abe42e1a24114285cbcc97227160f22338bd58b839e8a2a850dd30cbf4876b9abe6c65dc505f7a8300f57b57713dca3993"}]}}}, @hopopts={{0xe0, 0x29, 0x36, {0x84, 0x19, [], [@jumbo, @calipso={0x7, 0x20, {0xf9, 0x6, 0x1, 0x4, [0x6, 0x100000001, 0x4]}}, @generic={0x22, 0x9e, "063227b7f80197117b075873f6dc0b9faa0b2012218fd8bf01783475e84e2fde0fd7175d414e6289be68526bc19e86c0a447229dcde351210b44997d6e30e02105c364c5926662271da1ffcb5b00162ba6f91ac9ab378bdf683c83a4e14b6f6e505ca3046aa5d6d6fc5e327c9f47f9bc4dcb53efbec9c2ae462bb1ff6e2c52200dac9926d4aa4262c78ebfed03c4f7107b5e81332078283c06c0875a8e16"}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x3b, 0x1, [], [@pad1, @jumbo={0xc2, 0x4, 0x10000}, @enc_lim={0x4, 0x1, 0xf8}, @enc_lim={0x4, 0x1, 0xe4}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x62, 0x10, 0x3, 0x1, 0x0, [@remote, @ipv4={[], [], @loopback}, @loopback, @rand_addr="2ec81abed045c7fb0c30985f09b0b030", @local, @rand_addr="50cf36ae36ca193c0f6992bcd025a85f", @rand_addr="1da35988006e743e28973fa7f85f6b46", @remote]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x16, 0x6, [], [@enc_lim={0x4, 0x1, 0x81}, @calipso={0x7, 0x30, {0x6, 0xa, 0xb1, 0x9, [0x9, 0x100000001, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x5]}}]}}}, @hopopts={{0x60, 0x29, 0x36, {0x0, 0x8, [], [@calipso={0x7, 0x10, {0xfffffffa, 0x2, 0x5, 0x40, [0x80000000]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x2b}}, @jumbo={0xc2, 0x4, 0x1000}, @enc_lim={0x4, 0x1, 0xb2}, @hao={0xc9, 0x10, @empty}]}}}], 0x350}}, {{&(0x7f0000002e40)={0xa, 0x4e21, 0x1200, @ipv4={[], [], @broadcast}, 0x4}, 0x1c, &(0x7f00000050c0)=[{&(0x7f0000002e80)="bb11389afe9d63d743ac746e3addcc1b5c7baf7852f8311dccad0006c2", 0x1d}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000000c80)="fad1b8f0519e3ec33229b290f82a8b9b17bd37ae820420ef8a44f02122778224e631c9c7d682261b57b0d557ea374c766ea8c1896cce088a166d479b1f461b37df4d20f113c21b5e7a548349b1f603f09c3f6245b776461f14658c9ba5a2ac5b0b33a0ee5fc8074eeca07048d3779439961fbcaa2e84b160885596e90be6f96b1c33218aa3be", 0x86}, {&(0x7f0000003f80)="b66ca83c3c62101527565319fb9b", 0xe}, {&(0x7f0000003fc0)="8635a88ba54a6936f3eeb01181a4bb612a1c87e4ba9633c4d264f9e9c407ae7cb4b0933159935da337e9e3c0666ba517395a9e3dcea40af7e3e5259f2d5acd56b560a37c6478aed9be210b9094bd28b0225c9576fa617da0ddbb5e51e8bdc1376580dc4223a1cdb141cdab98ff8bd21245bb4613bdbeba00edca3b61cef1b62e6b65d54ffc0832a59da0ec3930ee5c5b060df69de9af023c8923e3ef6b56ffd33323deada314729dcd2f150d3a598a8680db18b52678f038a1270efbe6101375d8d0540def5d59f851467d6975", 0xcd}, {&(0x7f00000040c0)="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", 0x1000}], 0x6, &(0x7f0000005140)=[@hoplimit={{0x14, 0x29, 0x34, 0x1ff}}, @hoplimit={{0x14, 0x29, 0x34, 0xfec}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, [], [@pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hoplimit_2292={{0x14}}], 0x80}}], 0x6, 0x22014105) connect(r4, &(0x7f0000000200)=@isdn={0x22, 0x8, 0x5, 0x5, 0xdd}, 0x80) r7 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) dup2(r8, r1) tkill(r0, 0x1000000000016) 23:25:28 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xd, 0x0, 0x100000, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000900)="0a4e51e607e45bd7abca676c3d385f66f9e7568b739c15a4d4f8f7bf0bb55ad21c971a087307f830bcff3bc3284415d83168e34a3ee3f937b6b9fa1298e24bd3d97d91bbfbd3fefe018c7ed98397c5a85a855da645a107a1eb0000000000000000000022bec3", 0x66) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1a) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r4}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, 0x0, 0x20004894) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x4ba, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:25:28 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) setuid(r5) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) poll(&(0x7f0000000100)=[{r3, 0x400}, {r6, 0x10}, {r0, 0x2653}, {r7, 0x1001}], 0x4, 0x9) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x28}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 23:25:28 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2081fc) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x20000) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:25:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) socket(0x10, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) dup(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xa6243c793c935aaf) r6 = socket$inet6(0xa, 0x410000000001, 0x0) pipe2(0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r7 = dup(r6) bind$inet6(r7, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r7, 0x4, 0x800) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x100) ftruncate(r9, 0x10199b4) sendfile(r6, r9, 0x0, 0x8000fffffffe) [ 1090.592155] input: syz1 as /devices/virtual/input/input1944 [ 1090.619681] input: syz1 as /devices/virtual/input/input1945 [ 1090.654154] input: syz1 as /devices/virtual/input/input1946 [ 1090.694891] input: syz1 as /devices/virtual/input/input1947 [ 1090.748648] input: syz1 as /devices/virtual/input/input1948 23:25:28 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x81, 0x4, 0x5}, 0x1}}, 0x18) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1090.848946] input: syz1 as /devices/virtual/input/input1950 23:25:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) socket(0x10, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) dup(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xa6243c793c935aaf) r6 = socket$inet6(0xa, 0x410000000001, 0x0) pipe2(0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r7 = dup(r6) bind$inet6(r7, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r7, 0x4, 0x800) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x100) ftruncate(r9, 0x10199b4) sendfile(r6, r9, 0x0, 0x8000fffffffe) 23:25:28 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) socket(0x10, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) dup(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xa6243c793c935aaf) r6 = socket$inet6(0xa, 0x410000000001, 0x0) pipe2(0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r7 = dup(r6) bind$inet6(r7, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r7, 0x4, 0x800) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x100) ftruncate(r9, 0x10199b4) sendfile(r6, r9, 0x0, 0x8000fffffffe) [ 1091.041059] input: syz1 as /devices/virtual/input/input1953 [ 1091.108045] input: syz1 as /devices/virtual/input/input1954 23:25:29 executing program 3: ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x29}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002200), 0x1000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x53) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0xfffffffffffffffd) write$char_usb(r5, &(0x7f00000004c0)="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", 0x2d2) r6 = getgid() setfsgid(r6) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x7ff, 0x1, @remote, 0x1}, 0x1c) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r9) r10 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) 23:25:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000240)=""/72, 0x48}], 0x2, 0xc6d0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = fcntl$dupfd(r4, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fallocate(r3, 0x0, 0x101, 0xffff) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x8400fffffffa) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 1091.583880] input: syz1 as /devices/virtual/input/input1955 23:25:29 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000003c0)) setns(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000040)='\x82wusted.o\x03\a\x00', &(0x7f0000000080)='{|', 0x9e851816904039e6, 0x5) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) lstat(0x0, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) memfd_create(0x0, 0x0) getpid() syz_open_procfs(0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 23:25:29 executing program 1: clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0xfffffffffffffffe, 0x3, {0x7, 0x1f, 0x80000000, 0x2080004, 0x4, 0x7ff, 0x80000001, 0x1}}, 0x50) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd146373f2aaf296fc06065478d7a084c6ff8dabad01b9c9aa773ae810086d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754648275fd0d0ad080b28efc0076619e3d2995fb00000000"], 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/250, 0xfffffe8a) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/647], 0x287) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x5) mkdir(0x0, 0x0) socket(0x10, 0x1, 0x9) 23:25:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="42165915f0499ac989e00d818b1ac364ed30dbf40e9738ec0e4d3ce2ca2b3de6eb4bb997725be347e3e8537df76fe8c7857d83009dae30317125cce99390400dd54535d3b7a7832fae2c2ff4341f7d584853a20a4c4363701c93a505178adf15e32c76aa4513a7f470fb1fab5f7bff229dd091b4c24f435e55aa4fbfa8d3f6207e571fd47c6c2b65642ff06c81ecf001d59ca0b31afd7752206838954c24dd2f1e698b8cfc1af4250d89f529d812bc91b83e953fd0d8361411713045125fdc3b3a0879074435d52f68d624fd09f2a7f434209899", 0xd4}, {&(0x7f0000000240)="c72cbdf983c28ff870da58526691408cf29c873d5e6192b5e0cd433cf68efd01fa1bb9df65207504a3700b4b6523fb7ba891044140aaa9b9a3e6800aaf58b1c4cdc84443daa2ba959872a8c1f4a748c3875358e8bc09cbdfbe2f5cb75ac6c75e46c6db63500cb66650a4e43c257565335572572a15088db6ee43d918d35a73f543fa3adab1ffcfbc0e9de564ea0e66a1820555e12712f21170a47e4c476220d649381b91b00c1363a0f5135a6ee159d9f6a664cce2ff59d62ea9e27cf874f06bc336d41a269876525b65f5583d5898", 0xcf}, {&(0x7f0000000340)="2a6b5a85b569153e20a1eaf2d2cc9f1c33c14fbdae6d3137", 0x2}], 0x3, &(0x7f0000000400)=[{0xf0, 0x2ef, 0x1, "e8fe647f0117edb7134150b5e9fcfc18c4f50e1f417a16106944bc5973ec8f285a90b246d33cafe6b20c3279eba52e4ab26d284335a8bd60ed50eef8395db9320e438acaae3a09dae5cd2828bffdacbd532e6ff315f2d4c56d0d4fc1837978b44e538d15b59c872a221a176a20f8663f8dd7b9047ac57c4ef632e5c2c16de862f8049dee091df43d7e2307bc66ccc233a93f78da73824653afd04138ab534fd8fdbb5e15bea34667ba318c988920f5dae91d7913f81c118a4a1c734d5f734067ac73deb534a0f81f19ef65c84f4516cf9aaf0700a580bc084b5bbe2f83"}], 0xf0}}, {{&(0x7f0000000500)=@tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)="541be6a9328146945692a0433e3085dd44411360b3849e1799fe8f3fd77c7ae6020ed92b362e819a1c5b6e3c1df33ae53186a820e19826f116ac73c4f7243d788c4a826a85bae630886a7eedc9c375ec012c04ae672fdc23", 0x58}, {&(0x7f0000000600)="d006a3c6abeb4ff51d", 0x9}, {&(0x7f0000000640)="d685567ec662f54bad23162f5981918f83a3b29d8145dcfa7c8b95fc0ab098231e28754025e0fb74256c6b268b49780f4d47bbe2c206c366e15e20615ba652006d82bb45cea707b8fe4277320e075972b8dc86028d2e9594dca53f86457ecd5a9e885e5067fca1468855ed292eab858cb20fa7953b1954ca17c81e01256c8013", 0x80}, {&(0x7f00000006c0)="223e0da13de54175f7d46fca", 0xc}], 0x4, &(0x7f0000000740)=[{0x40, 0x112, 0x0, "5dc61e5c37d356d3d006175f1758adf1145214fe3f0847fd647a124bab76ba946ec5a8dddc6f322c565801e7d56cb7"}, {0x20, 0x10b, 0x4, "5850b489a2e0f3da571fd2d088"}, {0x110, 0x29, 0x4, "ad9144950ca566457f813a87cb0e610aedaccbaedd3b3c731d115758b0a8e767b912a5ccc2509c66e80a1f4ebe99b23f89ea34d863c05398508e7856e522b9e0ae77d8dc58c7e5d62d75cff3ae83269e35cfd343bd875095c88f2eeb26de0bddb5891646155f5681b3dcf6c83c77bb2b8061956e275564b125a745ffb5d50b7f131d37d2d56405ad479ae26408f63d4f2232487495d004e5145f211030e38b52ab64e45b8674555fd10f4fd9e838914ef490cde04da1746f8f158cf1b50de00e187a3f315554e5e01dec7965bf8a98159d8831c932df00661753e0db9af18d8a2f1dcda8825c2c3a78b217306abad082c4312021b76a27b665a8942fd555"}], 0x170}}, {{&(0x7f00000008c0)=@l2={0x1f, 0xfff, {0xff, 0x4, 0x0, 0x80, 0x5, 0x3}, 0x205, 0xf7}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000940)="9ee89340e81dbed883db4504804542d2202210", 0x13}, {&(0x7f0000000980)="33179074ccf0e230a52465695e0964", 0xf}, {&(0x7f00000009c0)="9ff1ebbbf5da88d50564abf7937a91209c6b56dad775d42874620aeccb6cde1de4a927a3ec52a714ad12f11812daf2e5f601a1c28b4ad1162fac4156fa4aa42a8e420e08d1731dc9989b4295bb51b2c7ebd7c5036f5145e7f8fe6452de42ba2407d8c84d1c606ba0564e0286bcd4a3019d24aa6996f593268de6d5debab4a44cddbf3302baadb4c6c02314e3d8da753c806b1ef7a4b8f2b2f6b030bfb78e7f6b4819effd72e0b1a5f18fc01e4fbf400ab6bdd4801b0984bc761c3858e6259e317dd550f441d2926411442d17e2339caa2496", 0xd2}, {&(0x7f0000000ac0)="86a18f87664f27537a0921d54d8061aa1237717df4b8ffcdd746cc31d490cea760381c2a40f5e1ae061990c021445159f82e52b5aafe6bafca08c554d978b6c956e57582d1128932cfeeae32f3c40782bedc8e3b1a2ecc3c67d2c62803f7e63d9e9231fee2eb54d9657242746f5787e5452b808e08889a1de021d2a05d35bd8bf81152996cdeff1d0be67a561ac3eb", 0x8f}], 0x4}}, {{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)="c5d78cec", 0x4}], 0x1, &(0x7f0000000cc0)=[{0x10, 0x10b, 0x8000}], 0x10}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d00)="c061ebe6c0243bf8f8fcd6f90897aab3dcc0899ba17c4edb2f0b9e16db0bb7340dee507a97f3d836042fa636bf6f0ebfc32ecf1f43af8a8dfb189c37b54e8eaccc06", 0x42}, {&(0x7f0000000d80)="3a0f7fdae730ec420d5ff6e39ab3fe057295a41c10d0ad550fd1847fb481d3ec7deb1b7b94fba29e16706af48dab75c5046523061136f84b52c5ac107dd7809e0a68f2a8b75e818d84eb0af5758c745cf244c3eb18a2e6cdb55a66fd4c3948be311fc604d17b76cf5a17eafb3f55a26d08782b8070b2530e09da640d7c02b7405f3ab88a6991e9ec11ed5d63b2c0c48c182b9814cd17b745637179af2c82e5adf49a61b6a4a35d7afb0fe69052a81627a28d576ceb3afff304cf04ce067cca4ba6b0a910b8a454851bb3f4e6ebef2df5c9f5af15c295723b9e52fc65a3ab6160a5eba02016049c7b2deaf9ee31f52942e50f38a1a585f4", 0xf7}, {&(0x7f0000000e80)="e263c4ccf4caac45802122a6820c9408425119e47c50f9f5bd33a0a7530126e53a6c1f1b1f1cfc164e97ce07", 0x2c}], 0x3, &(0x7f0000000f00)=[{0x80, 0x115, 0x6, "49461f6fa7c3885331a439ea4b41fbadd0924c3a850cc9a3aea4661ea6a09a236f0f81ca647a9f0836f508d56f1e2186c81fdb31fd754f6f2fcf27ee30c7712a323cb0d9649c9bf249f0b7e07e9d3d23fb92b932e7dc1e3ce857c0b86628079a3c43e2827d894fe9ca"}, {0x88, 0x110, 0x6, "593e44dfbd8b463877b8577bac0e0edf2ce99de91cea48dd3577117beb22d28bf5d59046addd1f399315b88b4c63b255edc0685b01503bbc5ee2e0fac5254c8767ce1b8712e0f5df1fbd5b31f4ca47aae6c58ea771b263224d682b6eaf1929ebe7f5c9666b3bb6d6c9a43c00a4a08cf2eeb90a9ab0ea"}], 0x108}}, {{&(0x7f0000001040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000010c0)="8d9b1ff5fa745746fa717c295e7a1f8718d4d41b8744fa3ea1bf5105f1085ff2e7e0122621b5f90cb00e9b49b95a9f9f9504b39edb3528f517077a8789f0f20d04b43b56c6f918ee869f3a1c7cdc3c362e9860b6ea9b95e7450e9cc85e551edb2e638561ea465dacc0d461b62df29d638c8106cd9a1f701d9e2535938da1a61da7c97c7a2bb9bbaf17a23133b70ef9e9b4863960", 0x94}, {&(0x7f0000001180)="f825c4aceab179c8bb4b5c8b155e667a33bfca7d9c46d67d18658f4b69bbd820a064c2b56c8b65c6a8bac0ae3d0b7279010ef0db707266725996589e17d1ff8d9b758167f154e5f5b956c9d3fba09a1dec87efaabcb4936af56d963b08b04f7cd64f3da83f66a6571b62870bf85c5dd16010768f3705447da7799cd3c19a8068908d2753dfee2a6ee9335e55f63d2ec706d2aa02a21ed585b0ecdc9d46c7c909fa3296490768d47abb9cac524a6de2b5060ade677e72868bb5f6f57f09774d847babebcfe41bc046867c4d07087973eec78b7ef8e80a5a02ee6e7a9d0a6eb3e90b5127f30857c8150d730e4c6b483a28a6", 0xf1}, {&(0x7f0000001280)="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", 0xfa}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="051f56dbb15bf907dbbdd3267edc1ddc728bca8e9f95d061e54559f56e7417ed32a021a28b008c387f2f198c6d9a710bd22f20be49e3e4e52e77318ba4e2800045686b2d435b2ee35634952c2b2b75cbc701844c37e30f04f552360b3184b566fcc184c2ba3030a2f3f19e5e57f87bafa20b43932df2570d06f92609f194e4ec23562eeeaf", 0x85}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="f186b13f8464100d86078854232ba3b1eb88d1b93951c85d69b730306be88dba9bb623feead4a567fb3b8cbf5e9b349c4afab03ee0fd9345140d62a513a4d7e7ac89ff62825702de644ec14dd62e7c911292c6f9ff770578ee52147df70a0cb71cc69e886f17213eeacc10ed0e2160b40ea1f2f4bf09c41d536b08a3a6de70", 0x7f}], 0x7, &(0x7f0000003540)=[{0xb0, 0x113, 0x8000000, "bccc31bdf193d9d2ac7b71150213378ca6a2d56cbb492b18ab84690ef13e10e877195ca6b6f83aedc105b62e3c6fb66fadf19a48b23b5c6ab5f53c7c309c371727035dc87f9ca974d78f250579d456978e21af5039d35ce6f9614a6f9831c71b5d6ef640725c5d4693b0b662ae966e24aaabb204ff872cdc91f01cd4f1f92fa04fe178eba67e1b3ea5813dc9e39f94f5b03ced3f7bb0ef39da2790a1"}, {0x58, 0x10e, 0xa72c, "c03ea59d831aef7f39b91309bac91aae5eea02720b24d5c5fb68d5ebb82dacf14b6d9420669ad9810188a29db8a80a83f01961adddaf1746f76344eb0998b7d265ab7d"}, {0xf8, 0x112, 0x3ff, "176ae2c4f653579347bca187c0d5c1657db6b0ed4771f6d3a3a119ec90e3d6000aafb5c257a035ac7b0d08765c93ac03aa7eefe84b426a438b3f9429a43cd521b9ab2637b477bbed8f25150464ef8d8e7d236add0d3689f931324850690003dabe034083e29870ce37f434c05e7395f77bf5f0a991b4487f653b95c0ae4262d5853b4d9426af6227bda4d5d822d05280b79a4f9ac0e456c186a88e08827809b08ffa4f122bad5866ff1061d7c8c53324969cccf3265c43a57f8c628655cb5d8f1ad2ba5242d4ec45165141c02b94855645068a8dc2f2fcaa86057fcde5f83e3435456e9937d151"}, {0x50, 0x115, 0x2, "b45c02ee6878663b44e238ea5205d34492c347b16e676f2495ca1e37d4cf0d4abd7e869bddffe093a93ff88a9f3a1026cb8dde69d88489999da091"}], 0x250}}], 0x4000347, 0x4005a) pread64(r0, &(0x7f0000000080)=""/143, 0x8f, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0) fstat(r2, &(0x7f0000003a80)) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000003940)=""/249, &(0x7f0000003a40)=0xf9) 23:25:31 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xd, 0x0, 0x100000, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000900)="0a4e51e607e45bd7abca676c3d385f66f9e7568b739c15a4d4f8f7bf0bb55ad21c971a087307f830bcff3bc3284415d83168e34a3ee3f937b6b9fa1298e24bd3d97d91bbfbd3fefe018c7ed98397c5a85a855da645a107a1eb0000000000000000000022bec3", 0x66) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1a) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r4}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, 0x0, 0x20004894) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x4ba, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:25:31 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="1680483daafccca651397f0433716712219bc6e2f1871e16575e786fd4979bc89754e935d83fb29520322c8b80f5afd063dc6ad6ec5db32d1e7666d0cbc81c0bd98b63bf0b5d1fd46b325bc03b5e5e7baae7b8d911adb3c080228a42d82658ed70e3271fd328c8395449808b53655431ad76feaedf86122712fb0a24ff7a6fc1303df91052659df39c42133d7d7f93f629f02019bae91d734dc4e0093ce9311760db0cdc1489178f1570d7bcedf2af40439fe33d526296c7f28af80aa01090955ea04b4eea73bd9658b0df9964277d88f04384838fa49d4dc9078e8d308bf4027d5a803e8c6ca772c1f1d6096f", &(0x7f0000000000)="fa5f01ca2454d7bb76c89bb4ca0a23647ae16efdbd04e08ff2b1255f3a25552085d9bcd0a6"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 23:25:31 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 23:25:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r0, 0x0, 0x800000bf) [ 1093.621094] input: syz1 as /devices/virtual/input/input1956 [ 1093.668111] input: syz1 as /devices/virtual/input/input1957 [ 1093.682223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 1093.735609] input: syz1 as /devices/virtual/input/input1958 [ 1093.777341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 23:25:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r0, 0x0, 0x800000bf) 23:25:31 executing program 4: r0 = epoll_create1(0x0) r1 = gettid() epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) close(r0) ioctl$LOOP_CLR_FD(r2, 0x4c01) 23:25:31 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r1, 0x100000000, 0x1) 23:25:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x91) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420000a77, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420000a77, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000180)={'nr0\x00', {0x2, 0x4e23, @loopback}}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000001c0)=0x3, 0x4) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1093.945394] input: syz1 as /devices/virtual/input/input1959 23:25:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)="e2cf6d6e0398c8f51791d6eda82ff5a556fc8218889a0d2251f97bda7f824b5ab3fec3a7f4368dcdaeaff8d60313babe476fd5b9c924a2361a980c91d70e068ec07dbe6fb6c3719add3e7010d3886c9a748a9c3840a7e1e16c84e2a660218a77417a8dc4d7e78fbceead4e225f85370096d1d7635c2249cae74405235c96722dabc0eeb7b14d9559a03fc3150334", 0x8e, 0xfffffffffffffffa) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="9ff04570744ec1804e00a385c2a1fa2dbaab37d1bd3bd0ee36fff28dedae98f778b3ed76501571756eb6f8a970f8c661dbb5ec1110e933b3f42272b446c22be1edd1e762", 0x44, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2}, &(0x7f0000000440)=""/4096, 0x1000, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@timestamp], 0x1) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$clear(0x7, r4) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r4) eventfd(0x3) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r5, 0xfffffffffffffffe) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1094.021253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 23:25:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$inet(0x2, 0x80a, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) 23:25:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = dup3(r3, r0, 0x180000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000001c0)=0x2, 0x4) 23:25:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)="e2cf6d6e0398c8f51791d6eda82ff5a556fc8218889a0d2251f97bda7f824b5ab3fec3a7f4368dcdaeaff8d60313babe476fd5b9c924a2361a980c91d70e068ec07dbe6fb6c3719add3e7010d3886c9a748a9c3840a7e1e16c84e2a660218a77417a8dc4d7e78fbceead4e225f85370096d1d7635c2249cae74405235c96722dabc0eeb7b14d9559a03fc3150334", 0x8e, 0xfffffffffffffffa) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="9ff04570744ec1804e00a385c2a1fa2dbaab37d1bd3bd0ee36fff28dedae98f778b3ed76501571756eb6f8a970f8c661dbb5ec1110e933b3f42272b446c22be1edd1e762", 0x44, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2}, &(0x7f0000000440)=""/4096, 0x1000, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@timestamp], 0x1) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$clear(0x7, r4) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r4) eventfd(0x3) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r5, 0xfffffffffffffffe) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1094.556329] audit: type=1400 audit(1574810732.403:104): avc: denied { set_context_mgr } for pid=2078 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1094.624748] input: syz1 as /devices/virtual/input/input1960 23:25:33 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r6 = socket(0x10, 0x2, 0x60) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x30000028}) splice(r0, 0x0, r5, 0x0, 0x8001, 0x0) 23:25:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)="e2cf6d6e0398c8f51791d6eda82ff5a556fc8218889a0d2251f97bda7f824b5ab3fec3a7f4368dcdaeaff8d60313babe476fd5b9c924a2361a980c91d70e068ec07dbe6fb6c3719add3e7010d3886c9a748a9c3840a7e1e16c84e2a660218a77417a8dc4d7e78fbceead4e225f85370096d1d7635c2249cae74405235c96722dabc0eeb7b14d9559a03fc3150334", 0x8e, 0xfffffffffffffffa) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="9ff04570744ec1804e00a385c2a1fa2dbaab37d1bd3bd0ee36fff28dedae98f778b3ed76501571756eb6f8a970f8c661dbb5ec1110e933b3f42272b446c22be1edd1e762", 0x44, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2}, &(0x7f0000000440)=""/4096, 0x1000, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@timestamp], 0x1) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$clear(0x7, r4) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r4) eventfd(0x3) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r5, 0xfffffffffffffffe) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:25:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) fcntl$getown(r2, 0x9) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='schedstat\x00') r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x100000008005) 23:25:33 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\xd3\x81\xff\x9c\xf1\xcc\xfe:4\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420000a77, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) ptrace$cont(0x20, r3, 0x1, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000300)="d353ff072d68b2e4dc14aa5fa8b3d94c22c4b3aced9facf129cd847b1fc0e23b6b4814fded12396b90666a4ebdd01413e7b4d8842a1159a819f46297058b8aaf4a72c488d7cbc0a455d11e0565728846bdfb36cef32d9fdf86332b422ba5900d94a40751b4a6580d68ecc1662fe7811b4ef420ebc918f5aff40dd152bdd8c2ce678749e07eb554ccede5bdf0103a91e2461ae53e749d176175e553362cf32f5f0da8b0d75525a218e033b3f34309e38f09ec24fcba66354ffd632dc155bc5be6c902af19a026684dccecbdb9c1c2244ba08c990e2ce3ecdac7ae2447a7aae252780e4a869720a5384f8f05019f0e") r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0x3ff) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000480)='security.SMACK64EXEC\x00', &(0x7f0000000080)={'mem\x00\x01y/\x06\xea\xe847G\xa8\xff\xff\x15\xd4B\xab\xe3\xfa'}, 0x17, 0x2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x40086, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000440)=0x5, 0x4) r6 = dup(r2) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000000)) 23:25:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = dup3(r3, r0, 0x180000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000001c0)=0x2, 0x4) 23:25:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = dup(r3) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7}, 0x7) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r5, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r10, 0x5502) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r11, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r11, 0x5502) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r12, 0x5502) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9b530028844d1d203498b8a440724d8abdd27a7e10c0ffe298487077ed63e3803b19edb3f89efc1d51a3de3ec5994fd36f961eca56711ac0ee488a3423c6b58b6ce1824bdc88dba666", @ANYRES16, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRES16=r10, @ANYRES16=r11, @ANYRESDEC=r9, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESOCT=r12]], @ANYRES32, @ANYBLOB="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"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 1095.912723] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1095.918681] input: syz1 as /devices/virtual/input/input1961 [ 1095.959657] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1095.993836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1096.027890] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1096.070315] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1096.105525] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1096.115147] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1096.145551] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 1096.271839] input: syz1 as /devices/virtual/input/input1962 [ 1096.338172] input: syz1 as /devices/virtual/input/input1963 [ 1096.392641] input: syz1 as /devices/virtual/input/input1964 23:25:34 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x400) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0xf351d016ddb62a8a}, @flat=@handle, @fda}, &(0x7f0000000200)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) [ 1096.575198] audit: type=1400 audit(1574810734.423:105): avc: denied { call } for pid=2140 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1096.640208] audit: type=1400 audit(1574810734.493:106): avc: denied { transfer } for pid=2140 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1096.701007] binder: 2140:2141 got transaction with invalid offset (40, min 24 max 104) or object. [ 1096.724707] binder: 2140:2141 transaction failed 29201/-22, size 104-24 line 3199 [ 1096.795430] binder: undelivered TRANSACTION_ERROR: 29201 23:25:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r3, 0x400, 0x0) close(r3) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x3, 0x1, 0x8, 0x2, r4}) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000080)={0x7}, 0x7) 23:25:34 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = dup3(r3, r0, 0x180000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000001c0)=0x2, 0x4) 23:25:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) lseek(r1, 0x800002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYPTR64], 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x3, 0x400000, 0x8020003) 23:25:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_binder}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) 23:25:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) fcntl$dupfd(r2, 0x0, r0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = dup(r3) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7}, 0x7) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r5, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r10, 0x5502) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r11, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r11, 0x5502) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r12, 0x5502) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9b530028844d1d203498b8a440724d8abdd27a7e10c0ffe298487077ed63e3803b19edb3f89efc1d51a3de3ec5994fd36f961eca56711ac0ee488a3423c6b58b6ce1824bdc88dba666", @ANYRES16, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRES16=r10, @ANYRES16=r11, @ANYRESDEC=r9, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESOCT=r12]], @ANYRES32, @ANYBLOB="080003002f00000000fe800000aa1400070066e329c7949daacfcde122b5862fe9b000000000000000000000006273a4a3bdea40f5777f6d80d69d552026b1a2949b1b0817d3d818c2d553bdedb0c72f7e96af32aa1aa5bfb8e9899c04f47ca0702163a5abf1f0000800000000000057f7e55b8a3245870567d8354b501bc4477476b6f2e3af82e6a72bdd9dcc85fb19919ccd75ef834d75fab252a7887547ee8a267fed62142b99e3d7340b1479a28b769ae291acb75c81da3776d35886338e88ea29dea41909ae1d6c85a682fd627a079030f805b38d6fb83d18fe14724a39f64e5d410eb6354ab0460f0d4c631f84792020a6616866c2d80d59778b13"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 23:25:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) lseek(r1, 0x800002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYPTR64], 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x3, 0x400000, 0x8020003) [ 1097.181943] input: syz1 as /devices/virtual/input/input1965 [ 1097.183379] input: syz1 as /devices/virtual/input/input1966 23:25:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) lseek(r1, 0x800002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYPTR64], 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x3, 0x400000, 0x8020003) [ 1097.536843] input: syz1 as /devices/virtual/input/input1968 [ 1097.628217] input: syz1 as /devices/virtual/input/input1969 23:25:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = dup(r3) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7}, 0x7) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r5, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r10, 0x5502) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r11, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r11, 0x5502) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r12, 0x5502) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9b530028844d1d203498b8a440724d8abdd27a7e10c0ffe298487077ed63e3803b19edb3f89efc1d51a3de3ec5994fd36f961eca56711ac0ee488a3423c6b58b6ce1824bdc88dba666", @ANYRES16, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRES16=r10, @ANYRES16=r11, @ANYRESDEC=r9, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESOCT=r12]], @ANYRES32, @ANYBLOB="080003002f00000000fe800000aa1400070066e329c7949daacfcde122b5862fe9b000000000000000000000006273a4a3bdea40f5777f6d80d69d552026b1a2949b1b0817d3d818c2d553bdedb0c72f7e96af32aa1aa5bfb8e9899c04f47ca0702163a5abf1f0000800000000000057f7e55b8a3245870567d8354b501bc4477476b6f2e3af82e6a72bdd9dcc85fb19919ccd75ef834d75fab252a7887547ee8a267fed62142b99e3d7340b1479a28b769ae291acb75c81da3776d35886338e88ea29dea41909ae1d6c85a682fd627a079030f805b38d6fb83d18fe14724a39f64e5d410eb6354ab0460f0d4c631f84792020a6616866c2d80d59778b13"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 23:25:35 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = dup3(r3, r0, 0x180000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000001c0)=0x2, 0x4) [ 1097.814149] input: syz1 as /devices/virtual/input/input1970 [ 1097.883199] binder: release 2156:2159 transaction 42 out, still active [ 1097.890081] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.896492] binder: 2156:2167 ioctl 40046207 0 returned -16 [ 1097.900069] binder: unexpected work type, 4, not freed [ 1097.900072] binder: undelivered TRANSACTION_COMPLETE [ 1097.919261] binder: send failed reply for transaction 42, target dead 23:25:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r3, 0x400, 0x0) close(r3) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x3, 0x1, 0x8, 0x2, r4}) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000080)={0x7}, 0x7) [ 1097.936714] binder: 2156:2193 transaction failed 29189/-22, size 88-24 line 3014 23:25:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_binder}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) [ 1097.999031] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.072501] input: syz1 as /devices/virtual/input/input1971 [ 1098.230501] input: syz1 as /devices/virtual/input/input1972 23:25:36 executing program 3: setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "e056bc6ecfef85d5b5a291e05adb28a0"}, 0x11, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xc500}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') [ 1098.442312] input: syz1 as /devices/virtual/input/input1973 23:25:36 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 1098.578494] input: syz1 as /devices/virtual/input/input1974 23:25:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000600)) r7 = syz_open_pts(r6, 0x0) read(r7, &(0x7f0000000080)=""/11, 0xb) fstat(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r5, r8}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x32}, r5}, 0x14) r9 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') sendfile(r1, r11, 0x0, 0x80040006) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r12, 0x5502) r13 = dup3(0xffffffffffffffff, r12, 0x100000) ioctl$PIO_SCRNMAP(r13, 0x4b41, &(0x7f0000000200)="e09314d9df647be57ad3366f6f913f76048458cc3d12e5575cf6f03ea4a7f7c28d35057dab08e36b00b7f23d5a249cb6531715f142b1888860e0abfdd5f08987a5a437716b0033df4a383b2ef64454c278693530aba40971a5975e0e77b4948afaa712f398799b86d44cfc54fed584d93140191b1b341252e9a9074f5d6232636e59c99860795cfd9c0f5bee46551450362aebb89c4b18294b10bea1183ee3f5beb11beeb0986d34fc1fc3713d1a1aeba1266ec3") dup2(r0, r1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) tkill(r10, 0x1004000000015) [ 1098.687472] audit: type=1400 audit(1574810736.543:107): avc: denied { write } for pid=2217 comm="syz-executor.3" path="socket:[134345]" dev="sockfs" ino=134345 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:25:36 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) dup3(r3, r0, 0x180000) [ 1098.918219] binder: release 2203:2207 transaction 52 out, still active [ 1098.944956] binder: unexpected work type, 4, not freed [ 1098.978466] input: syz1 as /devices/virtual/input/input1975 [ 1098.982492] binder: undelivered TRANSACTION_COMPLETE [ 1098.982706] binder: send failed reply for transaction 52, target dead [ 1099.003905] input: syz1 as /devices/virtual/input/input1976 23:25:37 executing program 0: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000640)) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) memfd_create(&(0x7f0000000040)='/dev/input/mice\x00', 0x7) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) memfd_create(&(0x7f0000000280)='/dev/input/mice\x00', 0x3) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) eventfd2(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000640)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') eventfd2(0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='fd/4\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) socket$inet(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRESOCT], 0x17}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x6, r3, 0xc2, 0x40) tkill(r3, 0x1b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) tkill(r4, 0x1d) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:25:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_binder}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) 23:25:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x2, 0x0) dup3(r0, r1, 0x0) r2 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r2, 0x0, 0xffff, 0x9) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) sendfile(r1, r2, 0x0, 0x10001) recvmmsg(r1, &(0x7f000000a100)=[{{&(0x7f0000009f40)=@can, 0x80, 0x0, 0x0, 0x0, 0xfe42}}], 0x1, 0x40, 0x0) 23:25:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @rand_addr=0x5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000900)="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", 0x907}], 0x2}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000600)) r9 = syz_open_pts(r8, 0x0) read(r9, &(0x7f0000000080)=""/11, 0xb) fstat(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r7, r10}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) sendto$packet(r4, &(0x7f0000000140)="f09099767779103f6d6d318970981c7f706effe01eccb29ce73c607e1125bebeccf53dc7469431ee322a6e0894f687a079d21665b7ff8ba8f5b1fb197ad55b", 0x3f, 0x4000801d, &(0x7f0000000280)={0x11, 0x9, r7, 0x1, 0x81}, 0x14) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf06b, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:25:37 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 23:25:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000340)={0x80, 0x8, 0x7, 0x2, 0x5, 0x10000}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000280)={'nlmon0\x00', {0x2, 0x4e23, @loopback}}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420000a77, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x300) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={@mcast1, @rand_addr="84837cebb24fea4ec2838a3296c27e4b", @mcast2, 0x5, 0x7, 0x4, 0x180, 0x4, 0x10000, r8}) tkill(r1, 0x3c) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000240)=""/56) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) setgid(0xee00) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:38 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x7fffffff, 0x5, 0x8, 0x8}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) write$cgroup_type(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) write(r4, &(0x7f0000000400)="ff38ffd7356ea9c8e8d66d78698115307e35be8b7b9c298bfe9478ef1685be5c03031c6551a9511ec9bce4c73f8a7597cca9ef685a6fd70eb6e040e481a0e3b2a4a78e48dea91fe541244968a3a886f2d8ff8db24792eadca8992182e5057fec32eeac706b327beaf4a14e0bf29c34fe102b492f64e60d704baa43a3c80d0000f328c244daf8791bc85229793bcb4d3d4ade369bc6fb2b41ef5c49ca30adfc0ca9667e079fd64b9b117b00f76124ba509db0935cd699d12353a9475790486e5afabd4bc3b7", 0xfffffdf4) 23:25:38 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420000a77, 0x0) dup3(0xffffffffffffffff, r2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) connect$inet6(r5, 0x0, 0x23e) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x800000004e22}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) listen(r6, 0x80) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000000080)=""/20, 0x14, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x4}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x322) 23:25:38 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x401) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$notify(r4, 0x402, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x9, 0x80000) r6 = open(&(0x7f0000000380)='./file0\x00', 0x282402, 0x1ae) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000340)) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080), 0x4) write$FUSE_LSEEK(r1, &(0x7f0000000000)={0x18, 0x0, 0x6, {0x7ff}}, 0x18) setns(r0, 0x0) clone(0x50360300, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) creat(&(0x7f0000000280)='./file0\x00', 0x1) [ 1100.222637] input: syz1 as /devices/virtual/input/input1977 23:25:38 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f0000000380)=""/185, 0xb9}], 0x5, 0xfffffffffffffabc) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:25:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f00000001c0)=0xffff8001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) [ 1100.511844] input: syz1 as /devices/virtual/input/input1978 [ 1100.540808] device lo left promiscuous mode [ 1100.546594] qtaguid: iface_stat: create(lo): no inet dev [ 1100.553620] qtaguid: iface_stat: create6(lo): no inet dev [ 1100.569157] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1100.576081] qtaguid: iface_stat: create6(lo): no inet dev [ 1100.586813] input: syz1 as /devices/virtual/input/input1979 23:25:38 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x68) sync_file_range(r0, 0x3, 0x3, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110003) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = accept$inet(r4, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) readahead(r3, 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x80045439, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) clone(0x2102001df8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0x0) 23:25:38 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x68) sync_file_range(r0, 0x3, 0x3, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110003) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = accept$inet(r4, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) readahead(r3, 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x80045439, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) clone(0x2102001df8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0x0) [ 1100.705923] EXT4-fs error (device sda1): mb_free_blocks:1466: group 12, inode 16561: block 393920:freeing already freed block (bit 704); block bitmap corrupt. [ 1100.721320] EXT4-fs error (device sda1): ext4_mb_generate_buddy:756: group 12, block bitmap and bg descriptor inconsistent: 2105 vs 2107 free clusters [ 1100.735279] EXT4-fs (sda1): pa ffff8800b88216c0: logic 0, phys. 393920, len 32 [ 1100.742653] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3814: group 12, free 17, pa_free 15 23:25:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_binder}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) 23:25:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2000013b, &(0x7f0000000040)=[{0x5c, 0x7}, {0x16}]}) 23:25:38 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) [ 1100.934317] binder: release 2237:2240 transaction 59 out, still active [ 1100.953819] binder: unexpected work type, 4, not freed [ 1100.980449] binder: undelivered TRANSACTION_COMPLETE [ 1100.987042] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.992967] binder: 2306:2307 ioctl 40046207 0 returned -16 [ 1100.999826] binder: send failed reply for transaction 59, target dead [ 1101.009907] binder: 2306:2307 transaction failed 29189/-22, size 88-24 line 3014 23:25:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x96a8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xa000, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3b8db) 23:25:38 executing program 0: open(0x0, 0x0, 0x1c0) r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r0, 0x127b, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x20d, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f00000001c0), 0x3cb1) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xb0, &(0x7f0000000500)=0x0) io_submit(r7, 0x0, &(0x7f0000001cc0)) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0xa, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x218302, 0x142) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r9, 0x0, 0x1420000a77, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r2, r5, 0x0, 0xa5cc554) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000140), 0x4) [ 1101.033679] input: syz1 as /devices/virtual/input/input1984 23:25:38 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) setsockopt$inet6_udp_int(r3, 0x11, 0xab, &(0x7f00000003c0)=0x7fff, 0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000400)=""/117) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x310) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) write$binfmt_misc(r1, &(0x7f0000000300)={'syz0', "244b3e3fe26ceed3271d64aa76f328295ac05779f79ccf173ba30b61260febd4f33b815293174c2e8168fad8df7140567c366b16f995950b8548d1dd52cb57b03c0b2cd5893244f8cb58bef11b957fc0950caacd9f3c18840014e3a7ff2f619fa6c2e3f5ff"}, 0x69) write$P9_RVERSION(r4, &(0x7f0000000380)=ANY=[], 0x0) 23:25:38 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='u', 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x8}}, 0x40) r1 = dup(r0) fcntl$notify(r0, 0x402, 0x20) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000180)='net/rfcomm\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f00000000c0)={{0x8e3ce8d86e407729, 0x0, @identifier="3ca39c750b859914d698a48c988132bb"}}) [ 1101.079534] binder: 2306:2314 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1101.082482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18772 sclass=netlink_route_socket [ 1101.092028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18772 sclass=netlink_route_socket 23:25:39 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r5 = syz_open_pts(0xffffffffffffffff, 0x0) read(r5, &(0x7f0000000080)=""/11, 0xb) fstat(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r4, r6}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)=r4) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0xfe) r8 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r8, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x14) openat$keychord(0xffffffffffffff9c, 0x0, 0x4002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r8, r8, &(0x7f00000001c0), 0xa198) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xffffff78) syz_open_pts(r9, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) [ 1101.790757] binder: undelivered TRANSACTION_ERROR: 29189 23:25:41 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:25:41 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="9a", 0x1}]) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00d3ba0610000014660f3423"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:25:41 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) 23:25:41 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r5 = syz_open_pts(0xffffffffffffffff, 0x0) read(r5, &(0x7f0000000080)=""/11, 0xb) fstat(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r4, r6}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)=r4) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0xfe) r8 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r8, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x14) openat$keychord(0xffffffffffffff9c, 0x0, 0x4002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r8, r8, &(0x7f00000001c0), 0xa198) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xffffff78) syz_open_pts(r9, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) 23:25:41 executing program 0: open(0x0, 0x0, 0x1c0) r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r0, 0x127b, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x20d, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f00000001c0), 0x3cb1) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xb0, &(0x7f0000000500)=0x0) io_submit(r7, 0x0, &(0x7f0000001cc0)) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0xa, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x218302, 0x142) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r9, 0x0, 0x1420000a77, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r2, r5, 0x0, 0xa5cc554) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000140), 0x4) 23:25:41 executing program 3: open(0x0, 0x0, 0x1c0) r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r0, 0x127b, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x20d, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f00000001c0), 0x3cb1) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xb0, &(0x7f0000000500)=0x0) io_submit(r7, 0x0, &(0x7f0000001cc0)) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0xa, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x218302, 0x142) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r9, 0x0, 0x1420000a77, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r2, r5, 0x0, 0xa5cc554) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000140), 0x4) 23:25:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="081b58789e984dcc7f2b507044df203f530e9ffc7352d75c0cea1389ce33da8c056b65b327f6edaee1ced2b16d5cb2ef8545f599ea673ca92a4501661a98c8c23717f70ee0d2926e23afab3164656457387aee52e32ffab8864d6632ffe1493da2d5a98cd16e41eb81cf00919b6baa5420e728fe5ec9669275813e24c641fab5c4f46c1d717ca79611020afb385c572dcabd1c09a35f", @ANYBLOB="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"], 0x1096) ioctl$KDSETMODE(r2, 0x4b3a, 0x7ff) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:41 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x2000, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGPTPEER(r3, 0x5441, 0xb9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe2(&(0x7f0000000640), 0xdc00) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfb120eb7) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r10, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r11 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r11, 0x0, 0x0) r12 = open(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r12}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r13 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r13, 0x0, 0x0, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r13, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYRES64=r14], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00032abd7000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) [ 1103.590190] input: syz1 as /devices/virtual/input/input1986 23:25:41 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000280)=""/248) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000200)) ptrace$cont(0x3dd28ddd9ba1981, r0, 0x4000000000, 0x20000000) 23:25:41 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x4f8, 0x0, 0x2, [{0x3, 0x2d350ff1, 0x10f, 0x8, 'status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce'}, {0x5, 0x1f, 0x10f, 0x7, 'status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce'}, {0x3, 0x3, 0x0, 0x5}, {0x2, 0x4, 0x0, 0xff}, {0x3, 0x240000000000000, 0x10f, 0x6, 'status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce'}, {0x4, 0x6, 0x0, 0x200}, {0x2, 0x8001, 0x10f, 0x2, 'status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce'}]}, 0x4f8) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:42 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) 23:25:42 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x2000, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGPTPEER(r3, 0x5441, 0xb9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe2(&(0x7f0000000640), 0xdc00) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfb120eb7) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r10, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r11 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r11, 0x0, 0x0) r12 = open(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r12}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r13 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r13, 0x0, 0x0, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r13, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYRES64=r14], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00032abd7000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) 23:25:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x6600) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) r2 = dup2(r1, r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x1320a6) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, 0x1b) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x35) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r6, 0x4, 0x427fd) 23:25:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x40010, r0, 0x0) open(&(0x7f00000002c0)='./control\x00', 0xc40beb2474df942a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000280)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}, &(0x7f0000000300)) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x30, &(0x7f0000000100)="5f8dbdbb21dd26931f3b920145d37dba497d459bbaf7756689f50ede6162b3da3aac0f53499d5d1b296d1240d26b0190", 0x20, 0x0, &(0x7f0000000140)="20a84f96816e9d4f2411ce332882c4b26b4e51861a5c26fac3e4ab2dbec42089"}) 23:25:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101000, 0x0) sendto$inet6(r2, 0x0, 0x55, 0x0, 0x0, 0x95) 23:25:42 executing program 4: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000000180)) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) close(r5) lseek(r2, 0x0, 0x2) sendfile(r2, r6, &(0x7f00000001c0), 0x8000fffffffe) io_setup(0xb0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) io_submit(0x0, 0x0, &(0x7f0000001cc0)) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x3b) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r2, r6, 0x0, 0xa5cc554) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x800, 0x4dff8868581ae3ea, 0x9a54709542ddbaa7}, 0xfffffffffffffc62) 23:25:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x34) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) fallocate(r2, 0x4000000000000010, 0x0, 0x7ffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x8400fffffffb) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 1104.554254] input: syz1 as /devices/virtual/input/input1987 23:25:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x40010, r0, 0x0) open(&(0x7f00000002c0)='./control\x00', 0xc40beb2474df942a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000280)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}, &(0x7f0000000300)) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x30, &(0x7f0000000100)="5f8dbdbb21dd26931f3b920145d37dba497d459bbaf7756689f50ede6162b3da3aac0f53499d5d1b296d1240d26b0190", 0x20, 0x0, &(0x7f0000000140)="20a84f96816e9d4f2411ce332882c4b26b4e51861a5c26fac3e4ab2dbec42089"}) [ 1104.695665] input: syz1 as /devices/virtual/input/input1990 23:25:42 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xbf, &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffd7c}, 0x240400c0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000a4718a138a093376d91ab0c1b50ca5afd66b2ec868f7860536dfdee2fd"]}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffff60b, 0x2, 0x3, 0x9, 0xd46, 0x2, 0x10000}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) socketpair(0x0, 0x4, 0x1, &(0x7f0000000040)) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000006c0)={0x4b7, {{0x2, 0x4e23, @rand_addr=0x3ff}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:25:42 executing program 0: open(0x0, 0x0, 0x1c0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000040)=0x6e, 0x180800) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xfffffffe, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fchdir(r1) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000180), 0x8000fffffffa) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645abbd4a8c3275cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f85c47a00bb66503e502b8d19c602109dc51008a0e3e3a7365951c3e9eddcc5c5b7"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 23:25:42 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1105.116683] input: syz1 as /devices/virtual/input/input1992 [ 1105.235672] input: syz1 as /devices/virtual/input/input1993 [ 1105.896906] input: syz1 as /devices/virtual/input/input1994 [ 1105.960877] input: syz1 as /devices/virtual/input/input1995 23:25:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x13ep\xc8S\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82Mf\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xb7\xbd\x97\x8exe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce\x00\x00\x00\x00') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x503180, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xe4deecbf64ffa27}, 0x54) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0xffffffffffffffff, 0x3c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x40, 0x8db, 0x7, 0xfffffffd, 0x6}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:44 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\xa31\xb24\xa9BNo\x19\xc3\xe6>RL\"\xc5f+o\x86\xb9M\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&$\xe0\xfc\r\x13yg\xefX\xfbk\xbb\x15\xea\xa4\xfe\ru\xed=~\xb2m\x1e\xcd\xb1e\xba?\xde\x1b9\x9d9(\xfc\xb1+\xc0\xd9\x97\xd8\xdf\x02\xb7\x95\xf2\x19=c\x13\xc2D\xe35\xd4\xbe-\x91\xb0M\x12ib\xc6\xda!\xd3t\x96|\x7f\x19\xb7\xfe\x87u\xe1\x85\xe6\xcb\x0f\xff\xc2;\xbc|+\x89\xa6/\x04A\x91\xeene\x10\xe4\xa2\x00\xf4mr\xc8\xe7\xd4R\xb5\xf8\x1a\x8d\x1c}\xabI\xa3\xde\x96\xb8%Sf\xae!q\x133\x8b\x9d<\"\xb8n\xb2\xbf\x1d\xdb\x9f\x12O/a\x90>\xc6\xd81O\xae\x00[\xbdU\xbe($\xfb\xff\xe3f\xdb\xd4\xab\x8e\xcfu\xf5\x89\xfc\x97\x82\xb7\xa9f\x7f\xbd\bINz\x86\xael.\xa7\xcb\f\xfa\xc3\xcax>\xf4\x10\xbf\xb9\xe1\xf8\xebI[F\xd5\xa4\x85l\xc2\xcfn\b\x00\x00\x00\x00\x00\x00\x00y;W\xed$\xdb\xd8J\x8b\xc5') openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x400001) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="044b0f0505c8f2e6f30f340191358e97"], 0x10}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:25:44 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3], [], [0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r1) read$FUSE(r1, &(0x7f0000000280), 0x1000) r3 = creat(&(0x7f0000001280)='./file0\x00', 0x0) write$FUSE_BMAP(r3, &(0x7f00000012c0)={0xffffffffffffff93}, 0x18) r4 = dup(r1) read$FUSE(r4, &(0x7f0000000280), 0x1000) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x2008000fffffffe) 23:25:44 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0", r5}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r8, r7, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(r10, r9, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) dup3(r12, r11, 0x0) r13 = dup3(r12, 0xffffffffffffffff, 0x1c0000) preadv(r13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) r14 = socket$inet(0x2, 0x80000, 0x0) syncfs(r14) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r16, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x40, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r17 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r17) r18 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r19 = memfd_create(&(0x7f0000000240)='/dev/keychord\x00', 0x0) pwritev(r19, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r18, 0x4c00, r19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r17, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r17, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r21, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r24, r22, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r17, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r20, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r18, r19, 0x0, 0x180003) 23:25:44 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000001dfffffff00"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x20) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1107.093881] input: syz1 as /devices/virtual/input/input1996 [ 1107.118594] binder: 2502:2522 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1107.165199] binder: 2502:2522 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1107.188913] binder: 2502:2522 Release 1 refcount change on invalid ref 0 ret -22 [ 1107.236915] input: syz1 as /devices/virtual/input/input1997 23:25:45 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3], [], [0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r1) read$FUSE(r1, &(0x7f0000000280), 0x1000) r3 = creat(&(0x7f0000001280)='./file0\x00', 0x0) write$FUSE_BMAP(r3, &(0x7f00000012c0)={0xffffffffffffff93}, 0x18) r4 = dup(r1) read$FUSE(r4, &(0x7f0000000280), 0x1000) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x2008000fffffffe) [ 1107.437227] input: syz1 as /devices/virtual/input/input1998 23:25:45 executing program 3: unshare(0x4000000) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='\xc6\xa3/u|sw') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x5, 0x2) r4 = dup(r3) clone(0x200000, &(0x7f00000000c0)="8319d801a3d633921f459e96038f841bea402a2c4dd30e333bb52efe313ff1136d3e650386bbbe1ef3275911ad053bf5525d8fdd0cc40a4b1f592fc61833060ae62d658e1e024970486f7fc70228b18ae54e3118d55069b38cc0422208d3ad8ee2dbdc0e68fe51da762648aee8dbf548653eaf777b135f788f50ae986e3cedd6284e", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="1f9189cdc16376cf5dc1dab87398c9dcfd6cf4431b84bbaadc52c39e989602e155f02bde37dcaf3187ce8eba5820deff5c6b16d9ca5b9d87c113bad46a176fa10e54dbce213c21ba1b9e848b510b9ad9576dfad48aaf3d7f878ae78d1770ae8cb0ecbae3fd515a3d0c1d3361a1e15055fd05d7dce077ed3d5550cc0cc969efcd467b282f1d1e6ce5cb5c879a5b054ae2ff2d434db3e16277615a9abb9b1181eb11aea93f397d0e46b9e0a0f9dc1a988657639bdcf918ac3434958860e3df91e7b35fca24973d7ea0d52fb07a57fd961cab") setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x8}, @mss, @timestamp], 0x3) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x2a0f62ec}) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x8) setns(r1, 0x0) 23:25:45 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = getuid() r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = eventfd2(0x0, 0x0) fstat(r15, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r16) r17 = eventfd2(0x0, 0x0) fstat(r17, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r18) r19 = eventfd2(0x0, 0x0) fstat(r19, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r20) r21 = eventfd2(0x0, 0x0) fstat(r21, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r22) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="020000000100060010b7d55cf30000000002000200edaeff01a375ec9243e0aeed5ba623b7252498f57637378dc6bb48431d0e119de809573b81e29a4e33a0cec930e796789fba7ca9ff20a17e7c0858dafe9825630e83b57331ce596c3ef0f70868954281d237d532e8a2462d6bab7e20f516d5661138b794bf10a6ce3a79375c5078e9a52798f49779d3cbc4f779b0c71d92e9f083939ed2f11ff663e3fbd838b131194edb2a9d5f5a9f00546d18cbbe46136a0ea2b01b2eb9fec519ec47029a03ae945a6ebc1230b36a9a2366751d224d2fa2819e338255fc52ab74ca6c76dcc9b2ad5c5f46ac", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="02000300", @ANYRES32=r7, @ANYBLOB="0200f2d8", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=r13, @ANYBLOB="0400d48f0000000008000400", @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r16, @ANYBLOB="08000200", @ANYRES32=r18, @ANYBLOB="08000200", @ANYRES32=r20, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=r22, @ANYBLOB="0800ff8c", @ANYRES32=r23, @ANYBLOB="08000200", @ANYRES32=r24, @ANYBLOB="1000020000000000200002000000008d"], 0x8c, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 23:25:45 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0", r5}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r8, r7, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(r10, r9, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) dup3(r12, r11, 0x0) r13 = dup3(r12, 0xffffffffffffffff, 0x1c0000) preadv(r13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) r14 = socket$inet(0x2, 0x80000, 0x0) syncfs(r14) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r16, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x40, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r17 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r17) r18 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r19 = memfd_create(&(0x7f0000000240)='/dev/keychord\x00', 0x0) pwritev(r19, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r18, 0x4c00, r19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r17, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r17, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r21, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r24, r22, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r17, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r20, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r18, r19, 0x0, 0x180003) [ 1107.681821] input: syz1 as /devices/virtual/input/input1999 23:25:45 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1107.924794] binder: 2565:2567 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1107.939210] binder: 2565:2567 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1107.952890] binder: 2565:2567 Release 1 refcount change on invalid ref 0 ret -22 23:25:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0\x00'}) dup3(r2, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}, 0x0, r5}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x3, 0x20, 0x69df}) ftruncate(r1, 0x2081fc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) fcntl$getownex(r6, 0x10, &(0x7f0000000200)={0x0, 0x0}) fcntl$lock(r4, 0x6, &(0x7f0000000240)={0x6, 0x0, 0x2, 0x3, r7}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) read(r8, &(0x7f0000000000)=""/250, 0xedf1d44) ioctl$PPPIOCGIDLE(r10, 0x8010743f, 0x0) r11 = open(0x0, 0x141042, 0x0) fcntl$setstatus(r11, 0x4, 0x40400) write$FUSE_WRITE(r11, &(0x7f0000000080)={0x3bc, 0x0, 0x0, {0x81}}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) r12 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r12, &(0x7f0000007e00), 0x40000000000025d, 0x0) [ 1108.250607] input: syz1 as /devices/virtual/input/input2000 [ 1108.271650] input: syz1 as /devices/virtual/input/input2001 [ 1109.009876] input: syz1 as /devices/virtual/input/input2002 23:25:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) getitimer(0x2, &(0x7f0000000180)) tkill(r1, 0x3c) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000140)={0x6000000000000000, 0x5, 0x1}) ptrace$cont(0x9, r1, 0x0, 0x0) 23:25:47 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='rdma.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$link(0x8, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f00000000c0)=@builtin='builtin_trusted\x00') 23:25:47 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\xa31\xb24\xa9BNo\x19\xc3\xe6>RL\"\xc5f+o\x86\xb9M\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&$\xe0\xfc\r\x13yg\xefX\xfbk\xbb\x15\xea\xa4\xfe\ru\xed=~\xb2m\x1e\xcd\xb1e\xba?\xde\x1b9\x9d9(\xfc\xb1+\xc0\xd9\x97\xd8\xdf\x02\xb7\x95\xf2\x19=c\x13\xc2D\xe35\xd4\xbe-\x91\xb0M\x12ib\xc6\xda!\xd3t\x96|\x7f\x19\xb7\xfe\x87u\xe1\x85\xe6\xcb\x0f\xff\xc2;\xbc|+\x89\xa6/\x04A\x91\xeene\x10\xe4\xa2\x00\xf4mr\xc8\xe7\xd4R\xb5\xf8\x1a\x8d\x1c}\xabI\xa3\xde\x96\xb8%Sf\xae!q\x133\x8b\x9d<\"\xb8n\xb2\xbf\x1d\xdb\x9f\x12O/a\x90>\xc6\xd81O\xae\x00[\xbdU\xbe($\xfb\xff\xe3f\xdb\xd4\xab\x8e\xcfu\xf5\x89\xfc\x97\x82\xb7\xa9f\x7f\xbd\bINz\x86\xael.\xa7\xcb\f\xfa\xc3\xcax>\xf4\x10\xbf\xb9\xe1\xf8\xebI[F\xd5\xa4\x85l\xc2\xcfn\b\x00\x00\x00\x00\x00\x00\x00y;W\xed$\xdb\xd8J\x8b\xc5') openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x400001) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="044b0f0505c8f2e6f30f340191358e97"], 0x10}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:25:47 executing program 4: eventfd2(0x0, 0x0) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffe44, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="5034ff7f0000000000000000"], 0xe}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:25:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timerO\xa9\x8as\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) recvfrom$inet(r5, &(0x7f00000001c0)=""/202, 0xca, 0x12, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000040)={0x7, 0x1}) sendfile(r0, r1, 0x0, 0x88201) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) [ 1110.142907] input: syz1 as /devices/virtual/input/input2003 [ 1110.150201] binder: 2584:2602 Acquire 1 refcount change on invalid ref 0 ret -22 23:25:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='rdma.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$link(0x8, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f00000000c0)=@builtin='builtin_trusted\x00') [ 1110.183400] binder: 2584:2602 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1110.208891] binder: 2584:2602 Release 1 refcount change on invalid ref 0 ret -22 23:25:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x12}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) tkill(r1, 0x27) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) [ 1110.438269] audit: type=1400 audit(1574810748.293:108): avc: denied { read } for pid=2615 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:25:48 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timerO\xa9\x8as\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) recvfrom$inet(r5, &(0x7f00000001c0)=""/202, 0xca, 0x12, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000040)={0x7, 0x1}) sendfile(r0, r1, 0x0, 0x88201) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) 23:25:49 executing program 3: socket$inet(0x2, 0x4000020000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffec9, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0xffffeb4}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket(0x20000000000000a, 0x2, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4034abbb0140212014250f34"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x11) tkill(r2, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 1111.321317] input: syz1 as /devices/virtual/input/input2005 23:25:49 executing program 3: socket$inet(0x2, 0x4000020000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffec9, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0xffffeb4}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket(0x20000000000000a, 0x2, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4034abbb0140212014250f34"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x11) tkill(r2, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 1111.430590] input: syz1 as /devices/virtual/input/input2007 23:25:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:51 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007041dfffd946f610500020000e8fe02080100010800080003000400ff7e280000001100ff", 0x2b}], 0x1, 0x0, 0xffffffef}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='EF\x00', 0x100400, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/197}) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000140)="240000001a005f0214f9f4070009040081000000fe0000000000000008000400050000d4", 0x24) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x7, 0x1, 0x800, 0x1, 0x7, 0x11, 0x4, 0x3, 0x7ff, 0x7}) 23:25:51 executing program 0: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)="a63f58b83d873bb2ea80d89764ffa786c0d9296bc32364636e5eecf4c51c89227be23d33cce2c72569d237001e5f11c618e3d83a210f73b7acb3919df34f", 0xfa) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645ab7c11f1b82345da0e9daa3f7475cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f85c47a00bb66503e502b8d19c602109dc51008a0e3e3a7365951c3e9eddcc5c5b7b60d5b7e2da60717e50037ab1802800508dccf29a46591b5de396cd6041d3a7e95f59d1cbd89cf440e7edeb0eed201c7e535aa397fb50027d9f85b7f7abe20065cfa832f30bfa2b1cb43032610be73147bf10884970efefa77efb1895c90f2a60cf7ac13f29f07d91309000000000000003ee60e6ad7ce873b5a89afe3fcb055691268aaa842d4b26b17ba88a4e8769d"], 0x0) socketpair(0x1, 0x80000, 0x81, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 23:25:51 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) fcntl$setstatus(r3, 0x4, 0x4000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0)=0x800a74, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000440)=0xc) ptrace$setopts(0xffffffffffffffff, r6, 0xfb, 0x5d) r7 = getpgid(0x0) unshare(0x4040000000) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r8, &(0x7f0000003280)=[{{&(0x7f0000000a00)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x7, 0xa5, "aa017c94a77945a9e13e7e0c457736cafa6cfd02bc815d3f7f81137037776556d5acd1f55a85f9af059b09f3d8b698e3a9e7cbfa9676a45e73790b14bea46b", 0x25}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000140)="954248bbcc2b8df211b96efa6f4d78a2a58797005a5a4e1fecb7", 0x1a}, {&(0x7f0000000a80)="52732d86ee489f26c17a0a492973e90b1cf1e2872801ccbb760722a9906f1bbbcccd04735bac6c2cfee956696d6646a591f63f34c0f70b", 0x37}, {&(0x7f0000000ac0)="1b65acf9f2f37cd8694bdea80831151b787efc0ed6f9a37a9b110c0f16181b86e993497db8672ac512db5911591a5fc442a8590f35f3f7684f34a938953f20c54484c3c3", 0x44}], 0x3, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], 0x16d}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c40)="cf035a322f7ee12fe604b8a14ce7e3c04da7608881435d83701f3f86793b65f03a801eaebd4c02131b4c6eb13e897318c27574993fcb21b15db5bb4e2216595a1ecbb88c726cd1e5bc44ce60d2313745d4ed20d6c0806c1112958bae0e11a6079821d7b6425fafea0f2a2194d7592def116181d6e0df5f", 0x77}, {&(0x7f0000000cc0)="182e9dd58717b94568e09d4caacccb98b69308d094da3eb92a2a0afb0536bbf5c7169bfd6a014223419ac6d89ae4c946c7b7cf5a5acb7c75d3c1e1d5693c378ed667f08f2fee8b69538c8bc2d11e7c36e8f291ab83905dc531ba047f16ef89c67563ae857ee0d5cbfd8c5d80f02d327bbb9f22b07d0507c4f284533c4273c5c4e133f1ae42bd1cd8351cc832ffbc550e2f550387b3fd11f861f82075ca9d629c337a436f30ac2d5cf10deb318da337ad6bf26dce55fa32823bebda4b3e14cc8946defeb72b19a05a76cef38dea0d69be98f3a09644df49676ade4eed771b0e2f2dd9", 0xe2}, {&(0x7f0000000dc0)="bf6dd6b9dc4cc8a316a281b0467adc151963448e", 0x14}, {&(0x7f0000000e00)="b619577570c725ce9961af096d2bb725fac4e927d40bab753ed2f6624d9af5b8c528c8da6eaf37836ba6e74d", 0x2c}], 0x4}}, {{&(0x7f0000000e80)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)="10455a547d5bf98a1a433dd87cbbaf38aa8e74b40a12e1a71aeeffface5664edf94153f4b7cfd0ca5e5392fc4f0952afcf01fc9158768badfe2e56ea8c0ccdfb36c9216ce5c2bc5aa0376dffa1f64a9e5cc50a13a7ac3dea8336cf3bd747e80801", 0x61}], 0x1, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], 0xd0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000010c0)="f141e548d117296b2beb05b286bbd4541b7b962aeb489058dae68a0dbb27bc627191e3b9231d00280a37fc79ed6206ab9a573e6a7e34b67151a569d93bddd58981a726bac4a5a2c8d617f78d9faee63dbfda013f39aa5a716f72bd43b7a9ec0a7b858975abf51ce6a727b916a34b5fb1f261fa29ee8e15b15f69e7a36a158eb0ba5937121a1e9fafe76da6a8dc77d5dbad60797fad17b7f1aee6a81f0c449bba1026ce7ff9534014eaf20cb1be58db4b6cad4d83c1a1d474f9d8daffd2d56dcd9690cb0c5baca426657cb287b74df1963ae0e63f161298168d66e418c4098c3dad7de2acb19a70b804f62e", 0xeb}, {&(0x7f00000011c0)="e4705967c94578df5162985500cbedf537bfec71c3cc9fde279221ad3ed7c55e214210ec05ce70a623d4e16abefb15d455ca0de0a35e0559f8c7db458c725b8c6a02f3562a63f2d04c41891a7d", 0x4d}, {&(0x7f0000001240)="be0036b59a7c43faef66a9fb33de8d45efb6309c9525b592fc06b5cf594a81567db7071d2e943b89b4ac213e74b9d50f1f78b879b3df603702eae1def1da83880d1c0b929867288f855f50bc2ff1b611c1cc9a3e8f064df16588b8e9a301038e73debe70633be68edba5", 0x6a}, {&(0x7f00000012c0)="205112400a54fc0b4e383175e9ed2bca5a8413ca4b17631f21f95051c056957efd0a30548491e3e6097819e6d00ff180f440c9c852536480cda10439cbc29c7ac7bc5ea3e96dcada027282143218885894047688051aa57b0026800ad34264a59a4de14188762c422992c78d772c090915fa670b171be7447f74e69d45d9b0c75ca904945c91aa6210f54099da35a4861f7a7e1d2eb4974d596eda8c8b28f1c3e48ad82a79a9abdf08dcb04e0442d1b724d41831e1f815e4663ddefd27f2bb81df0656aa99339d4819ddcbe28e92ab4c2fe0917291099b33", 0xd8}, {&(0x7f00000013c0)="600c21de57de3d8934a8734afd169cdf01d604ba956acf8b9b4373c1f953acf0ba3b9faf7643b0e9cb33b9c0af9de641ff4a18dad890c93e1dbb8fdd72b74455171c10a6416da6e4c5bcac128d0db00e02b1293d38e81398e00eddc8f5002718c9", 0x61}, {&(0x7f0000001440)="9a5c6b15a575b2cce32ee558f5e8b26abb870c5718b3103c4ad355b296fe24253a17eddfc1f4b268283ca2faf503ab1d647870bbafd81841399ed537edf3f4de91c162ecfe45f802275a910cfc2bacbdc98c66364142d9745613aa66f89ed164da9d6c5fef76957edcc639bf3c24e129bdb1dac19716ea6c777fe6034370b181a87c82f65b42cdfde4540c60b3de91b0b696b35c20b77ad6fc4d73d692bdd31e1ea7bc4b9366e833ff25a749a3e9279e362549fc896a", 0xb6}], 0x6}}, {{&(0x7f0000001580)=@un=@file={0x0, './bus\x00'}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001600)="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", 0xfa}, {&(0x7f0000001700)="7c895d6d3ce1a03be1c46f248de3cfe92b8cd8014e43c8d470990132b6082880ccd6bb753f127bc0716819bb344f5261d752e0bf4e2a5c751c4c5b16969e0b720d03c3fe7b9517d83d46bf7a33acc93f312d256887b612ad2495b2ee0cbb0b16ed551b554cb808f14a22d2ced81ce8ac2a6b5b26a3f073d7ebe5e039308fa4e48ad1112e0789d31c", 0x88}, {&(0x7f00000017c0)="72ca818946b37ed13fe730a0f11e8ea7b52154b48b2a83af91de04be2feb5687cc7c2cbdbc366042e6bfd5e91772444c20fd3b473d9cedff34c742f4624f7ccb6c4133676f4e0a7df990e2d40679506c0f6537d6524a59e67396dd899227b9f1925886ab822d3df7abf8164f0ec6dafbc62c3d58b7f4999c5d81958b5fa08cbbfda634cf420a2405e06398236d38c6187c8540c26199e1238b5e6ffb43ab6de6740849c6fc9eea7d77c0d27963f4718ec105d73879ff0d772abbd894b983e38c6ca3dc49ddaba62673bdbe61f7e124f4a5232a1dd4382b25be96288963957980d989f9dc94a28203bc3f038e3d3408f5c2141715e3aeab3051d9a5c1c31c65", 0xff}, {&(0x7f00000018c0)="9ee2123eb9c00b036c052089d7f5f2006a0340286b1bbc1edc9386062759637620673116b5914add40716e4b76d98c9818b0e7aab61f6d9eeaaf41e9fc66da14b987e067b85ca8f90683b0619a2e832849304be422db0824cf337e7f4919cbda3df69d7acfdfd17eb68d96459e8286", 0x6f}, {&(0x7f0000001940)="d1ac261c0aa05c206c1e45dd4209bebce13eb8a43079cba2ce8c3696017122a448fea0c8e96e710f4c7eb61e53272bcd52baa642bfd317225d20935f7481b8122956dd83a451391a779981de8ef4dba3146483ce749f300ca9f69a877ecb3365c566081362555df942bb51498289f2134861102d73025efdfafd96ab37e2b179a96b5ef842cfbac400a54ec329116778ec358f6a7f7b36", 0xfffffffffffffd89}, {&(0x7f0000001a00)="777c321c7a10f01501b83ba11b4442", 0xf}, {&(0x7f0000001a40)="289fcaaa346d4dd3a372318ab81bb916651f81365587320add02e632bc911e45b1a880c5da5206dcc35d12c19a27c9369669b99e11b178e66432cc238b61610df804b190e3cab661c338c4c0520c26ff3b1f", 0x52}, {&(0x7f0000001ac0)="212961bdd53ce679edcc6bfeb30eadcd31ee0ddce0897393b06b65db7e51fc59", 0x20}, {&(0x7f0000001b00)="6c726d2ef24a58a2d835d891f3527b9a58cc4277899debc5848bfd7e17aba01ad89c5da949161126b8fa2c3b3f664d887bbaa148e15195470acb4c9297ad01e050092a90ac35b2982db29a766fea6be977fa78ca3108d4cdcec24b54ac2a859c8be2fda1a967e40ab380a9ad1893e8d6b815481eb871330fc90149e078faacba265710ef9ec19ce41f0e6557bc963c7575f9021226665bee7553bc9ee360920c6acbfc951f319b939f5efb16d9d88aee4ae1912367c486e059c9bd6373868358b6681fd5de00c347a5344ccbdccb7184ead137edac6356540d6307f2b84fe6727f9fcb4ac7796589755b87c0df", 0xed}], 0x9}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="4262621059d012973b610ab573", 0xd}, {&(0x7f0000002d00)="393476d953833f1db99f809b823726513562e8be416f68f4e5a025a19df38f9dcd46565911d5fc51f7b47a03083773e15da5754cf253bd33ff629bcfb74b13b3ce7a3fbd3101b2e44cf2caab1b488741b960b366bcf3fd5845153e999c22a9d253723ca30b990476bd3f44a1f78856a3731c47389deb8811aef4d389620b4c029a9a218b86295de82a024ef1c696b90d9ecfe1b161c0567c714321203d985943e0d28af933036531d1ce0321683e56c62b8f4ae257fc43f0b5f6dae5d1eb807e833ca90edd6aec7bbf8879eb10dfbed8fd75846b63f4afaee22008f4", 0xdc}, {&(0x7f0000002e00)="71a045ca83c0016dbf2647925f4a59a90e6a409479abb55fda2ca2", 0x1b}, {&(0x7f0000002e40)="8528e9dffc60f85b6d2db4918d6d1da430927413722fee637a6584d9ce774e5fbf0c138b2ca98aad3f0401cecb4e9e1423745068c5575fd32763afd550eecdb5827ac056134ff8d7965ed911b5ad67a17185237b5b35cf8bf068643f5326b20d750d80bfb0eb3eadfb68bfbb9d647c0a2f2c5954b1db32ea8663ce90717c7551f6365c5f68ed13a218ece39dc5f525767c943ae8e89243a1", 0x98}, {&(0x7f0000002f00)="90fdbbaf8ddd7bf7c269dcb7352524ab764455051ff9dd505cfb194e678aea0c12d9", 0x22}], 0x6, &(0x7f0000002fc0)=[{0x48, 0x101, 0xbc, "b2ebdf71d3a36e8ba0d023127378204535736a4dbfcda1e05c476d28dd933fe5c138eca13fc8559f88df79a434a1914a49e291c8"}, {0xd0, 0x84, 0x8001, "482c820739e0b70cb2108eb7af796637fbeb6f493f080ac89f4b0cc7df42f091568e913729ced4b2198c758965f08c67c3f8c2b8244071eb7712fd4fa6e5446eee5d81008b90bc23b924a9c8ea2e993a1b6a201e6d4dbf58f1358853ca0e2203bfeea8ea34c743e3a86f2dae16f04e5fe03e017099ccfa9faa0bec08e7d85a830a7584acc4d89301d5b4e0675f4ceb463895ac70892f62b527a5c444543753145ba9d7f8141f345876cf98ab337d6ac1b5def127c9cb30c3999f24e86b01a8"}, {0xc8, 0x1, 0xfffffe00, "b1f69b073c4deabed53e08ad2c564d705ca22394263a0007cd6c71c10ea82e7f59048206e27585fa82a8272981137c0a6673604d6b4acf1e90f5cf5ac5b98fe22b61829a2efe6e88b764f4b5c0edf8a32b38efb0e6fc4f071705804c0bae00778d24119a4a4c25529a6f197d9d4d76f62516d3fa23431b6133abb180f0bdb3af8011e6edb4f606297570b984b17f17f59ebf27a8390f51b0e2613188e09903b84fe8f07a0e4e68f64852708c331c6db217be1a"}, {0x20, 0x103, 0x6, "df146b96adab71d72b07"}, {0x20, 0x2b4, 0xfff, "b64c0595dee444b57d9413f338"}, {0xa0, 0x10f, 0x100, "ab4b3a911ac8cccb4572068bf9f71269b336964fbb912cb2c97ef8be269af0cda95592eda0df43b4187bff90d54d7943ce532bd049d80c016e624bdea44178e89d6716794cb702c0d3ed0d4784cbb8f059d78a60146d7aa0d112f64304c4d9d36171c4706e631a34bc1ca8f761c7ba338c93b673e64a87eb8beda739f7f8f6428118886f60b68beb0d"}], 0x2c0}}], 0x6, 0x0) signalfd(r8, &(0x7f0000000000)={0x8001}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) rt_tgsigqueueinfo(r7, r9, 0x25, &(0x7f00000003c0)={0x2d, 0x43, 0x9}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r10, 0x5502) fsetxattr$security_capability(r10, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0xb8ad, 0x10000}, {0x8, 0x3}]}, 0x14, 0x1) 23:25:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000500)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000029000000c7cb49630000000000000000"], 0x18}}], 0x400000000000357, 0x8080) dup2(r0, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) dup(r5) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xb8, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2095}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r6, 0x0, 0x1420000a77, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 23:25:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r2, 0x9, 0x1, 0x7fffffff, 0x2}) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$clear(0x7, r4) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r4) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) r6 = request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='!selinuxvmnet1ppp1\x00', r5) keyctl$restrict_keyring(0x1d, r6, 0x0, &(0x7f0000000340)='syz1\x00') tkill(r3, 0x1b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r7 = syz_open_procfs(r3, &(0x7f0000000180)='net/route\x00') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) 23:25:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x5) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x200000d) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x212000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$LOOP_CLR_FD(r0, 0x4c01) 23:25:51 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="116348400000220000000000000000000000000000ffff000000000000000000000000f14a28867245524a3e4dbebc7300"/76], 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) r2 = geteuid() r3 = eventfd2(0x0, 0x0) fstat(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) r5 = eventfd2(0x0, 0x0) fstat(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r6) r7 = eventfd2(0x0, 0x0) fstat(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) getgroups(0x8, &(0x7f0000000000)=[0x0, r4, 0xee01, 0x0, 0xee01, 0xee01, r6, r8]) write$FUSE_CREATE_OPEN(r1, &(0x7f00000000c0)={0xa0, 0x0, 0x1, {{0x3, 0x3, 0x3, 0x100000000, 0xd0, 0x5, {0x3, 0xfffffffffffffffe, 0x2, 0x0, 0x3, 0xfffffffffffffffe, 0xf63, 0x1, 0x2, 0x7, 0x81, r2, r9, 0x1}}, {0x0, 0x8}}}, 0xa0) [ 1113.225173] input: syz1 as /devices/virtual/input/input2009 [ 1113.260473] input: syz1 as /devices/virtual/input/input2010 [ 1113.290695] binder: 2666:2669 got transaction to invalid handle [ 1113.300694] binder: 2666:2669 transaction failed 29201/-22, size 4488490436855736394-1941749325 line 3014 [ 1113.341493] binder: undelivered TRANSACTION_ERROR: 29201 23:25:51 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="116348400000220000000000000000000000000000ffff000000000000000000000000f14a28867245524a3e4dbebc7300"/76], 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) r2 = geteuid() r3 = eventfd2(0x0, 0x0) fstat(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) r5 = eventfd2(0x0, 0x0) fstat(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r6) r7 = eventfd2(0x0, 0x0) fstat(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) getgroups(0x8, &(0x7f0000000000)=[0x0, r4, 0xee01, 0x0, 0xee01, 0xee01, r6, r8]) write$FUSE_CREATE_OPEN(r1, &(0x7f00000000c0)={0xa0, 0x0, 0x1, {{0x3, 0x3, 0x3, 0x100000000, 0xd0, 0x5, {0x3, 0xfffffffffffffffe, 0x2, 0x0, 0x3, 0xfffffffffffffffe, 0xf63, 0x1, 0x2, 0x7, 0x81, r2, r9, 0x1}}, {0x0, 0x8}}}, 0xa0) [ 1113.395610] input: syz1 as /devices/virtual/input/input2011 [ 1113.624454] binder: 2680:2681 got transaction to invalid handle [ 1113.634276] binder: 2680:2681 transaction failed 29201/-22, size 4488490436855736394-1941749325 line 3014 [ 1113.660554] binder: undelivered TRANSACTION_ERROR: 29201 23:25:51 executing program 3: open(0x0, 0x0, 0x1e9) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r2, &(0x7f00000002c0)=0x202, 0xdd) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x17f) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000740)=""/260, 0xffffffffffffff28) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, "9fd239d75fbd95da", "4aa413d82103a15176510f58af535da6", "beca1823", "c1b97073bd2431bb"}, 0xfffffcc6) add_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000600)="ba26dad8000200000000000024d3fb1bc8ee66a7b7147076ea563beebc99c49bc8c0b00d4c5fe0b0427974604d8e63e29bf3", 0x32, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x880) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0xd2de73587715bdce, @local}, 0xfe32) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xee) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r5, 0x0, 0xa5cc554) 23:25:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:51 executing program 0: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)="a63f58b83d873bb2ea80d89764ffa786c0d9296bc32364636e5eecf4c51c89227be23d33cce2c72569d237001e5f11c618e3d83a210f73b7acb3919df34f", 0xfa) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645ab7c11f1b82345da0e9daa3f7475cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f85c47a00bb66503e502b8d19c602109dc51008a0e3e3a7365951c3e9eddcc5c5b7b60d5b7e2da60717e50037ab1802800508dccf29a46591b5de396cd6041d3a7e95f59d1cbd89cf440e7edeb0eed201c7e535aa397fb50027d9f85b7f7abe20065cfa832f30bfa2b1cb43032610be73147bf10884970efefa77efb1895c90f2a60cf7ac13f29f07d91309000000000000003ee60e6ad7ce873b5a89afe3fcb055691268aaa842d4b26b17ba88a4e8769d"], 0x0) socketpair(0x1, 0x80000, 0x81, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 23:25:51 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:51 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002000000e0000001000000000000000002000100000000000000040000000000030005000000000002000000e00000010000000000000000bb5bddab052c9a14db8f0ad2101545ebfceae4d184aee071a09a370812d6d8a9fa6d94f60a9f3f576cab5e971e9a15a744540eb31f0f3a5fcccb29185bca5f794c3fe4be44ceb96e00624e0594ea1967ceddd7b7dd87aaeed227ad2d1970a6af803d620969e70ba448a4fa0c6eb70cb8fe50b246d6b8a9fb013afe2ef310516185b3ee3308ac017bb1a59a5f81cbfc4f1f179e07f1c5c0ba1fbb958690fa395358bdb5441255bd46bac4d7d8c88568d915be66cf17a0cd6bc0ce5f8aa28ee77d64948621cbce6ac3146203fd734a05c69e602c15da742f93947cdd47d94a1ad1e5252987ac4aa8d0e7b0405d51401fc4dbd7535e789701f92b149fcd57d277c09cc6c6f562"], 0x50}}, 0x0) fcntl$setstatus(r3, 0x4, 0x4000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0)=0x800a74, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000440)=0xc) ptrace$setopts(0xffffffffffffffff, r6, 0xfb, 0x5d) r7 = getpgid(0x0) unshare(0x4040000000) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r8, &(0x7f0000003280)=[{{&(0x7f0000000a00)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x7, 0xa5, "aa017c94a77945a9e13e7e0c457736cafa6cfd02bc815d3f7f81137037776556d5acd1f55a85f9af059b09f3d8b698e3a9e7cbfa9676a45e73790b14bea46b", 0x25}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000140)="954248bbcc2b8df211b96efa6f4d78a2a58797005a5a4e1fecb7", 0x1a}, {&(0x7f0000000a80)="52732d86ee489f26c17a0a492973e90b1cf1e2872801ccbb760722a9906f1bbbcccd04735bac6c2cfee956696d6646a591f63f34c0f70b", 0x37}, {&(0x7f0000000ac0)="1b65acf9f2f37cd8694bdea80831151b787efc0ed6f9a37a9b110c0f16181b86e993497db8672ac512db5911591a5fc442a8590f35f3f7684f34a938953f20c54484c3c3", 0x44}], 0x3, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], 0x16d}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c40)="cf035a322f7ee12fe604b8a14ce7e3c04da7608881435d83701f3f86793b65f03a801eaebd4c02131b4c6eb13e897318c27574993fcb21b15db5bb4e2216595a1ecbb88c726cd1e5bc44ce60d2313745d4ed20d6c0806c1112958bae0e11a6079821d7b6425fafea0f2a2194d7592def116181d6e0df5f", 0x77}, {&(0x7f0000000cc0)="182e9dd58717b94568e09d4caacccb98b69308d094da3eb92a2a0afb0536bbf5c7169bfd6a014223419ac6d89ae4c946c7b7cf5a5acb7c75d3c1e1d5693c378ed667f08f2fee8b69538c8bc2d11e7c36e8f291ab83905dc531ba047f16ef89c67563ae857ee0d5cbfd8c5d80f02d327bbb9f22b07d0507c4f284533c4273c5c4e133f1ae42bd1cd8351cc832ffbc550e2f550387b3fd11f861f82075ca9d629c337a436f30ac2d5cf10deb318da337ad6bf26dce55fa32823bebda4b3e14cc8946defeb72b19a05a76cef38dea0d69be98f3a09644df49676ade4eed771b0e2f2dd9", 0xe2}, {&(0x7f0000000dc0)="bf6dd6b9dc4cc8a316a281b0467adc151963448e", 0x14}, {&(0x7f0000000e00)="b619577570c725ce9961af096d2bb725fac4e927d40bab753ed2f6624d9af5b8c528c8da6eaf37836ba6e74d", 0x2c}], 0x4}}, {{&(0x7f0000000e80)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)="10455a547d5bf98a1a433dd87cbbaf38aa8e74b40a12e1a71aeeffface5664edf94153f4b7cfd0ca5e5392fc4f0952afcf01fc9158768badfe2e56ea8c0ccdfb36c9216ce5c2bc5aa0376dffa1f64a9e5cc50a13a7ac3dea8336cf3bd747e80801", 0x61}], 0x1, &(0x7f0000003400)=ANY=[@ANYBLOB="4000000000000000840000001f000000e5f1773206fc6e9aece480b93722a8d841d84ed3547170ccf772d3758fafece19ba6230a5d7e16c34c563d6b000000009000000000000000010100000900000060bc299fe761ed2733ab0e14e3a39a9a5c301c5d1fc6d07ac160836266ce5f3b20aa4c1436e1072a82e0cc509a82f34b51b740d166c627ae5099e75cd723a2acf6d8d65879a576f72204cf5d9eaeefc006c79d816c963b40e16ec84093082391c3b2a3f62f0ae7bb3fe668a967320abfbba974296d5f6d5314dc000000000000e705959d1b3b8a8819b97070e8b3e698397ac8bf0ce60d96cf63780b734ce88be8bdcc005b0a9ddb719d54cea27224c0bddb8811de44e84bd437e3b70b0c5ac94c86a10e678a655f3bf60c2b941e066aba7b89cb319812a6e4770a4a78b3a7741279a4568c99ab1108569d8fa809060b96f24f"], 0xd0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000010c0)="f141e548d117296b2beb05b286bbd4541b7b962aeb489058dae68a0dbb27bc627191e3b9231d00280a37fc79ed6206ab9a573e6a7e34b67151a569d93bddd58981a726bac4a5a2c8d617f78d9faee63dbfda013f39aa5a716f72bd43b7a9ec0a7b858975abf51ce6a727b916a34b5fb1f261fa29ee8e15b15f69e7a36a158eb0ba5937121a1e9fafe76da6a8dc77d5dbad60797fad17b7f1aee6a81f0c449bba1026ce7ff9534014eaf20cb1be58db4b6cad4d83c1a1d474f9d8daffd2d56dcd9690cb0c5baca426657cb287b74df1963ae0e63f161298168d66e418c4098c3dad7de2acb19a70b804f62e", 0xeb}, {&(0x7f00000011c0)="e4705967c94578df5162985500cbedf537bfec71c3cc9fde279221ad3ed7c55e214210ec05ce70a623d4e16abefb15d455ca0de0a35e0559f8c7db458c725b8c6a02f3562a63f2d04c41891a7d", 0x4d}, {&(0x7f0000001240)="be0036b59a7c43faef66a9fb33de8d45efb6309c9525b592fc06b5cf594a81567db7071d2e943b89b4ac213e74b9d50f1f78b879b3df603702eae1def1da83880d1c0b929867288f855f50bc2ff1b611c1cc9a3e8f064df16588b8e9a301038e73debe70633be68edba5", 0x6a}, {&(0x7f00000012c0)="205112400a54fc0b4e383175e9ed2bca5a8413ca4b17631f21f95051c056957efd0a30548491e3e6097819e6d00ff180f440c9c852536480cda10439cbc29c7ac7bc5ea3e96dcada027282143218885894047688051aa57b0026800ad34264a59a4de14188762c422992c78d772c090915fa670b171be7447f74e69d45d9b0c75ca904945c91aa6210f54099da35a4861f7a7e1d2eb4974d596eda8c8b28f1c3e48ad82a79a9abdf08dcb04e0442d1b724d41831e1f815e4663ddefd27f2bb81df0656aa99339d4819ddcbe28e92ab4c2fe0917291099b33", 0xd8}, {&(0x7f00000013c0)="600c21de57de3d8934a8734afd169cdf01d604ba956acf8b9b4373c1f953acf0ba3b9faf7643b0e9cb33b9c0af9de641ff4a18dad890c93e1dbb8fdd72b74455171c10a6416da6e4c5bcac128d0db00e02b1293d38e81398e00eddc8f5002718c9", 0x61}, {&(0x7f0000001440)="9a5c6b15a575b2cce32ee558f5e8b26abb870c5718b3103c4ad355b296fe24253a17eddfc1f4b268283ca2faf503ab1d647870bbafd81841399ed537edf3f4de91c162ecfe45f802275a910cfc2bacbdc98c66364142d9745613aa66f89ed164da9d6c5fef76957edcc639bf3c24e129bdb1dac19716ea6c777fe6034370b181a87c82f65b42cdfde4540c60b3de91b0b696b35c20b77ad6fc4d73d692bdd31e1ea7bc4b9366e833ff25a749a3e9279e362549fc896a", 0xb6}], 0x6}}, {{&(0x7f0000001580)=@un=@file={0x0, './bus\x00'}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001600)="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", 0xfa}, {&(0x7f0000001700)="7c895d6d3ce1a03be1c46f248de3cfe92b8cd8014e43c8d470990132b6082880ccd6bb753f127bc0716819bb344f5261d752e0bf4e2a5c751c4c5b16969e0b720d03c3fe7b9517d83d46bf7a33acc93f312d256887b612ad2495b2ee0cbb0b16ed551b554cb808f14a22d2ced81ce8ac2a6b5b26a3f073d7ebe5e039308fa4e48ad1112e0789d31c", 0x88}, {&(0x7f00000017c0)="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", 0xff}, {&(0x7f00000018c0)="9ee2123eb9c00b036c052089d7f5f2006a0340286b1bbc1edc9386062759637620673116b5914add40716e4b76d98c9818b0e7aab61f6d9eeaaf41e9fc66da14b987e067b85ca8f90683b0619a2e832849304be422db0824cf337e7f4919cbda3df69d7acfdfd17eb68d96459e8286", 0x6f}, {&(0x7f0000001940)="d1ac261c0aa05c206c1e45dd4209bebce13eb8a43079cba2ce8c3696017122a448fea0c8e96e710f4c7eb61e53272bcd52baa642bfd317225d20935f7481b8122956dd83a451391a779981de8ef4dba3146483ce749f300ca9f69a877ecb3365c566081362555df942bb51498289f2134861102d73025efdfafd96ab37e2b179a96b5ef842cfbac400a54ec329116778ec358f6a7f7b36", 0xfffffffffffffd89}, {&(0x7f0000001a00)="777c321c7a10f01501b83ba11b4442", 0xf}, {&(0x7f0000001a40)="289fcaaa346d4dd3a372318ab81bb916651f81365587320add02e632bc911e45b1a880c5da5206dcc35d12c19a27c9369669b99e11b178e66432cc238b61610df804b190e3cab661c338c4c0520c26ff3b1f", 0x52}, {&(0x7f0000001ac0)="212961bdd53ce679edcc6bfeb30eadcd31ee0ddce0897393b06b65db7e51fc59", 0x20}, {&(0x7f0000001b00)="6c726d2ef24a58a2d835d891f3527b9a58cc4277899debc5848bfd7e17aba01ad89c5da949161126b8fa2c3b3f664d887bbaa148e15195470acb4c9297ad01e050092a90ac35b2982db29a766fea6be977fa78ca3108d4cdcec24b54ac2a859c8be2fda1a967e40ab380a9ad1893e8d6b815481eb871330fc90149e078faacba265710ef9ec19ce41f0e6557bc963c7575f9021226665bee7553bc9ee360920c6acbfc951f319b939f5efb16d9d88aee4ae1912367c486e059c9bd6373868358b6681fd5de00c347a5344ccbdccb7184ead137edac6356540d6307f2b84fe6727f9fcb4ac7796589755b87c0df", 0xed}], 0x9}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="4262621059d012973b610ab573", 0xd}, {&(0x7f0000002d00)="393476d953833f1db99f809b823726513562e8be416f68f4e5a025a19df38f9dcd46565911d5fc51f7b47a03083773e15da5754cf253bd33ff629bcfb74b13b3ce7a3fbd3101b2e44cf2caab1b488741b960b366bcf3fd5845153e999c22a9d253723ca30b990476bd3f44a1f78856a3731c47389deb8811aef4d389620b4c029a9a218b86295de82a024ef1c696b90d9ecfe1b161c0567c714321203d985943e0d28af933036531d1ce0321683e56c62b8f4ae257fc43f0b5f6dae5d1eb807e833ca90edd6aec7bbf8879eb10dfbed8fd75846b63f4afaee22008f4", 0xdc}, {&(0x7f0000002e00)="71a045ca83c0016dbf2647925f4a59a90e6a409479abb55fda2ca2", 0x1b}, {&(0x7f0000002e40)="8528e9dffc60f85b6d2db4918d6d1da430927413722fee637a6584d9ce774e5fbf0c138b2ca98aad3f0401cecb4e9e1423745068c5575fd32763afd550eecdb5827ac056134ff8d7965ed911b5ad67a17185237b5b35cf8bf068643f5326b20d750d80bfb0eb3eadfb68bfbb9d647c0a2f2c5954b1db32ea8663ce90717c7551f6365c5f68ed13a218ece39dc5f525767c943ae8e89243a1", 0x98}, {&(0x7f0000002f00)="90fdbbaf8ddd7bf7c269dcb7352524ab764455051ff9dd505cfb194e678aea0c12d9", 0x22}], 0x6, &(0x7f0000002fc0)=[{0x48, 0x101, 0xbc, "b2ebdf71d3a36e8ba0d023127378204535736a4dbfcda1e05c476d28dd933fe5c138eca13fc8559f88df79a434a1914a49e291c8"}, {0xd0, 0x84, 0x8001, "482c820739e0b70cb2108eb7af796637fbeb6f493f080ac89f4b0cc7df42f091568e913729ced4b2198c758965f08c67c3f8c2b8244071eb7712fd4fa6e5446eee5d81008b90bc23b924a9c8ea2e993a1b6a201e6d4dbf58f1358853ca0e2203bfeea8ea34c743e3a86f2dae16f04e5fe03e017099ccfa9faa0bec08e7d85a830a7584acc4d89301d5b4e0675f4ceb463895ac70892f62b527a5c444543753145ba9d7f8141f345876cf98ab337d6ac1b5def127c9cb30c3999f24e86b01a8"}, {0xc8, 0x1, 0xfffffe00, "b1f69b073c4deabed53e08ad2c564d705ca22394263a0007cd6c71c10ea82e7f59048206e27585fa82a8272981137c0a6673604d6b4acf1e90f5cf5ac5b98fe22b61829a2efe6e88b764f4b5c0edf8a32b38efb0e6fc4f071705804c0bae00778d24119a4a4c25529a6f197d9d4d76f62516d3fa23431b6133abb180f0bdb3af8011e6edb4f606297570b984b17f17f59ebf27a8390f51b0e2613188e09903b84fe8f07a0e4e68f64852708c331c6db217be1a"}, {0x20, 0x103, 0x6, "df146b96adab71d72b07"}, {0x20, 0x2b4, 0xfff, "b64c0595dee444b57d9413f338"}, {0xa0, 0x10f, 0x100, "ab4b3a911ac8cccb4572068bf9f71269b336964fbb912cb2c97ef8be269af0cda95592eda0df43b4187bff90d54d7943ce532bd049d80c016e624bdea44178e89d6716794cb702c0d3ed0d4784cbb8f059d78a60146d7aa0d112f64304c4d9d36171c4706e631a34bc1ca8f761c7ba338c93b673e64a87eb8beda739f7f8f6428118886f60b68beb0d"}], 0x2c0}}], 0x6, 0x0) signalfd(r8, &(0x7f0000000000)={0x8001}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) rt_tgsigqueueinfo(r7, r9, 0x25, &(0x7f00000003c0)={0x2d, 0x43, 0x9}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r10, 0x5502) fsetxattr$security_capability(r10, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0xb8ad, 0x10000}, {0x8, 0x3}]}, 0x14, 0x1) [ 1114.363780] input: syz1 as /devices/virtual/input/input2015 23:25:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r10, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000600)) r13 = syz_open_pts(r12, 0x0) read(r13, &(0x7f0000000080)=""/11, 0xb) fstat(r13, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r11, r14}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r16 = socket$inet6(0xa, 0x2, 0x0) r17 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r17, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r19, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r19, 0x40045431, &(0x7f0000000600)) r20 = syz_open_pts(r19, 0x0) read(r20, &(0x7f0000000080)=""/11, 0xb) fstat(r20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r18, r21}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r23 = socket$nl_route(0x10, 0x3, 0x0) splice(r22, 0x0, r23, 0x0, 0x1420000a77, 0x0) r24 = accept4$inet6(r22, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) r25 = memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)=0x0) r27 = eventfd2(0x0, 0x0) fstat(r27, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r28) r29 = socket$inet6(0xa, 0x2, 0x0) r30 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r30, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r30, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r32, 0x40045431, &(0x7f0000000600)) r33 = syz_open_pts(r32, 0x0) read(r33, &(0x7f0000000080)=""/11, 0xb) fstat(r33, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r31, r34}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r35 = eventfd2(0x0, 0x0) fstat(r35, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r36) r37 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r37, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r37, 0xc0502100, &(0x7f0000004780)) r38 = socket$inet6(0xa, 0x2, 0x0) r39 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r39, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r41 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r41, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r41, 0x40045431, &(0x7f0000000600)) r42 = syz_open_pts(r41, 0x0) read(r42, &(0x7f0000000080)=""/11, 0xb) fstat(r42, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r38, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r40, r43}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r44 = eventfd2(0x0, 0x0) fstat(r44, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r45) getgroups(0x1, &(0x7f0000004800)=[r45]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r48 = eventfd2(0x0, 0x0) fstat(r48, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r49) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3, 0x0, 0xffffffffffffffff}) r51 = dup(0xffffffffffffffff) r52 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r52, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r52, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r52, 0x5502) r53 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r54 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r54, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r54, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r54, 0x5502) r55 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r55, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r55, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r55, 0x5502) sendmsg$netlink(r6, &(0x7f0000004a80)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000004680)=[{&(0x7f00000002c0)={0x26c, 0x11, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="473aabff3e99db632852718209b79ef0905e76fbc0ba14d86afb35fe3b0168534a86f240d0f67abab12db29cf72b2477649237cb576962d67f853e67bdf94da49181bfa48a9bedaec6c720656897", @typed={0x8, 0x32, @fd=r8}, @typed={0x8, 0x4e, @uid=r14}, @nested={0x4, 0x82}, @generic="45334636336492840a0fd4c3e81fe9845b1d891baafaa2decc3f97730f23109bd7ba233f5102063bfd3edac570", @typed={0x14, 0x27, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="9d52a1d1048905fc0de05627b9fd33d0198f2f0a9f83089f1939", @typed={0x18, 0x49, @str='system,procselinux\x00'}, @generic="72c6c67bc72d4f75b376a2e0ee8a6623f5c336d8f3e02138bb890846016fd1b9ea49aaba6e080ee0dc6aa835d6bad05a50cb5da9f6728c469b41f3a1937f75848254e6ae0948134688280e2d240b0014742a9f4cd6be4165d05b17348e1625f111f87dceabbad9a1407672025c7895d7768ba52205bb284308b1a1f9fdc4a1d1a86b851d72d8638139bf230246848d8cdfcb0335a838e6b37dff4ac49c5c620086e3c9140c56d0b47480179f8da3e842c4d309e075013f4083e14cc0a525671befce5aa744", @nested={0xc0, 0x27, [@generic="359f40bc0e869ee297058e8771612924ff332744ddfda6a87838297e16ed3caacfa3581a5ad6598192b3697bf6c02bfd902b695204705a02358921084dd9478b9cbcb68d90e371d6d697550e8843e58001e42875c57bbff8e936d672a452f8a030bd7073db23214b726942bf698047ae7e06b7101e1a9fcd81b4509039a692e1b6a91aa97cc9b259e1470bdf3f53c1f9d56743d70e922ebbf95a5f313448057be2fbea7cc49bbbf1eee6fc8a13446190", @typed={0xc, 0x80, @u64=0x11d9}]}]}, 0x26c}, {&(0x7f0000004b00)={0x230, 0x33, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x170, 0x36, [@generic="8e204ea08e529770ef9946bde1fcde60b67072fa991ecb10e24ce4639b9d38cbf22ba2e1840c56260629b3e415dd3cc2eb04e63434d4f71063c78201c60154d378b8cc09ea6716683d6b71313bb6f2bb7dfdfb283b6bf0d91d3cfe9ee7ac6f2d76b173da35c76d38c42e078b74283826121249e28de13b502fc3af90117965e012275a98b96989a304e1d5a9fb07bdc035d1a14b9760af0c4f6a55beb5bd97df56ac6d585c7dd6691f2f40543ad0d27102", @typed={0xc, 0x3c, @u64=0xd67f}, @generic="355003f85ca0056326c4a1cce56410be3a8e70873941399636d06ce3387afff37c9fb26480e1bcf9e62d0969b09c02a35680626d88b21027f01aac63f4b887922f5d34defa44407808cab3068904abf4c3940dbfb3f84be8b7dfc080315edcf8180bf72e921b0b0865e222c557d2f6a6162d443dd98429fda9b13a9ec272e8af48412ac8c4d74799a154a53c163c8bd5ea5f6856a8c04dbdf1e0db5ad66dcb56d080742935c94f8d116128d3766861"]}, @nested={0x4, 0x51}, @nested={0x6c, 0x94, [@typed={0x8, 0x50, @u32=0x4}, @generic="62685c6582b38161ce317701b3b37da96d8b47d6c5e4b99d370a15120b664d900516eb8fde5ab5e8b518dcfa3f0ce0cfc2046dd86d6d83e2bfc26da6c4df1c7eec78cd69840a4c2d128ec5f19e8ea1d80fba4a8660a68aca5bb59c9749"]}, @typed={0x8, 0x27, @pid=r15}, @typed={0x8, 0x68, @ipv4=@remote}, @generic="5f0555c74beb9543f2be86b3b7568e88d42494b82b3f2b736269454fc27dd41406cf7e4a9e5adda04a425026f2e9"]}, 0x230}, {&(0x7f00000007c0)={0x10, 0x33, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000003000)={0x390, 0x28, 0x0, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x4, @ipv6=@rand_addr="129863d8cb8c1ac5f4a68059c16a5c2b"}, @typed={0x8, 0x4, @uid=r21}, @typed={0xc, 0x26, @u64=0xd5d}, @nested={0xc8, 0xa, [@generic, @typed={0x8, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="d4b5829e92cdfead81a6823c7367b632995fa9079f5484d2ed6007c3fedaaf79b9f922bf364d31087e2181746e456beeeb3167c2ab777fb3582468ff400569f6f57acaf9bb9f7355621dedacaa33deb55cae4837df163aaea95c5c70dec6b9ee14de6cc22fe79a0c0653cfb151c177fdfd204fd38c51de1dcc42e51b8b81e7ca59ea5f4dea2b07ed647a4d5d08809068667e15f839f0ab40ef7c", @generic="c95eae751f2c9a8f48de6c93fc7ce95020c9ebe12b6c1e7dae7ebe39575605"]}, @nested={0x190, 0x3e, [@generic="3bcc3aa15ae22e041b666b42e812a0c2a548f5c74a127add9e2b45b7dec60337dfd5c0b0ab18c9349d1876ab0ad487140c50ba02dac49bd5fda96d965902d0369681538064d4da771c7620f440863e618f26c7efbe3f95587d103e2dc7611632eba9c36410370274618f20117a2e3a0cf52bfc541852607521f87c686d27695b7dd7817cacc154731d03937f2964accab14d805c5c33917830f5757c551da9db564aac2844339533bf6130ed1e1bb2de046ff1b3a432b2b0297cd687d26c0c70815c08e75781050d7f045ee4f012022b46b2ac4045c826bc966be3f2ff4b8cd730", @typed={0x8, 0x7a, @fd=r24}, @typed={0x8, 0x1, @u32}, @typed={0x8, 0x0, @u32=0xaf3}, @generic="8fc4e7ff005b41666b83e456bbe76e82438d9b158b2da397e9df9b1a123880271dafc0453ff0bcbed08ed410393a60d34f7214c3d01f9c0cc6a999111800843871b0cd0ba52e9255fb5a20b524a9e60aa5f4561458a69723adc2f336155bf93b3ba42c85fcc94d8b558caa9587aca94b9237dff3321e2657526f13114fa91ce205df924f09cb9a9540f2f808ed3aa9a56d93"]}, @typed={0x100, 0x5e, @binary="a5a1ed26725a833b391266df8bc41a0e99cc5c945eb4093d0778d095a5e593d5fc9e756af7916fae24261ac2395d3ba5c33dfd02a9f72a785da9b14f63a7a39ec4b973722e0d4f9b30fd66928c79f2b5ce26d918235df1c8ed5d384b0375d6f4e3ea16f988747777109e54c055f3766568daf9e37161420749b902e5942ba339b1c8b159efd21240ced44c2ab1a7311a4940edc6d67153baf9755df2d307d86135e62ec7a95feec8647ebce5170ccb30ad7a7db895c995547fc3804ae93b9936abe2ae4285b6f5349006b8e65d6cfdd2b96ec7b188ba1cfd42966bbad7a57d33e8e29715e3afe6d349c00e9c2b2729d0ca1e53d64ae9159e3d"}]}, 0x390}, {&(0x7f00000033c0)={0x11e8, 0x3f, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x117c, 0x36, [@generic="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", @generic="896587088f051be67381d2eedc706e1f46d5abd20f9a99bd89e8699d40bdc51e42dd3e68dd14dc518b0cb28a1bc88e048f98fc029e501c", @typed={0x4, 0x90}, @generic="32249a99ba67ff2cea4dd97d8c9047c2f5f65d91b4f4ed8e2b12e284ed459a55d93b7226296005075b22ef6e095532a4b1ccfcaaf87c198b", @generic="df30f9cbc10b249f72fe158ff31c2bd994dba4f62f00e12a16f4743ebc9cdc478e39451518353e81fdf842ad6d1b3f8fc9e4a62178b979ecb02f0675b79a6604", @generic="34cc18560c278faa62023a50c4c3363627c2f4bdd6157429424af7548105721f05d295edd11e81646778431632a8bfa46659b33f2edb2283aff9a3cafc9ba5fa9b30a61094ba560d112933829dc387c1d48cd5664897469c406b7c12ac80e7e931e873216d8b57ba89a5f43fe2ce6d17be2f7af9ddf1d3260bb37e8dae1ad93b63a5ef1845de0d86707bc2ad994116372ba1eca50d9dc1999aa276b55f839f2c3f2241f6490f26461d7afa9367a1609642f31c0d76799db7f10bb89a924df0b2a35ed9"]}, @nested={0x5c, 0x91, [@generic="0584239dcbd29f2842fd07cbdf4fb6a1f0", @generic="d5de93d0b51d9a95efc104d6ad78b2e67ce296d08d947c58ed101262dc459d6a1a531f83364d47c53fb9176cc968bccf54ee107ec1be9a4368e0b9eee22b360a", @typed={0x4, 0x66}]}]}, 0x11e8}, {&(0x7f00000045c0)={0x14, 0x1d, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x78}]}, 0x14}, {&(0x7f0000004600)={0x78, 0x10, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x68, 0x7b, @binary="329339c5fcac2960e64fe40c3cbdd8d1cf7f7572937e28bf01956646f59b509795eb40cf4c91c329137a06e3403c2d434937c3bd55c2666c598f4229f118b8cd42323833bb37326f48c5a2abc5a8d246f21b47ce8b21ee08bf30939bd77add7e1b"}]}, 0x78}], 0x7, &(0x7f0000005000)=[@rights={{0x18, 0x1, 0x1, [r25, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r26, r28}}}, @cred={{0x1c, 0x1, 0x2, {r5, r34, r36}}}, @rights={{0x2c, 0x1, 0x1, [r37, r50, r51, r52, r53, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r46, r47, r49}}}], 0xa8, 0x4000}, 0x800) 23:25:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) read(r0, &(0x7f0000000600)=""/13, 0xccacf294) sendto$inet(r0, &(0x7f0000000300)="7c3e44ad92dfb89263b89b4d6431e04387bad67f0a4fbb241f3b6ee752418763edfc125ce9ea9f7fd2b2462c8579f2408a70ada23a9c5e90a1aed62ada9b81dc11bd115bf5253c4be617c784d879977addecad21bf52cc38b7237638e0c7057a64569197d55222f93feccad8c9d7cade311e4dcdc7ec67a63155fa2b8989472e0807203fc9d26849a5a9cad8f6fc471ae469b1daf12c13ea7839d9516dc4ad74461661972d95e39c2942e74cdd488426e89837bcc69dafec4d388099a8a8aaf85159c5f703", 0xc5, 0x4004800, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000004100)="26a30000000000000000", 0xfffb, 0x0, 0x0, 0xfffffffffffffe12) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000880)={'icmp6\x00'}, &(0x7f00000008c0)=0x1e) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000140)=""/122) shutdown(r0, 0x1) r6 = open(&(0x7f00000000c0)='./file0\x00', 0xed8577e9ffd7840c, 0xc4) renameat2(r6, &(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0) getpeername$inet(r7, &(0x7f0000000900)={0x2, 0x0, @dev}, &(0x7f0000000940)=0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 23:25:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/binder#\x00'}) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1114.936446] input: syz1 as /devices/virtual/input/input2016 [ 1115.014011] input: syz1 as /devices/virtual/input/input2018 [ 1115.020365] input: syz1 as /devices/virtual/input/input2017 [ 1115.083351] input: syz1 as /devices/virtual/input/input2020 [ 1115.153224] input: syz1 as /devices/virtual/input/input2021 23:25:54 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:25:54 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x79bd8194dadd67b9) openat$tun(0xffffffffffffff9c, &(0x7f0000001440)='/d#v/net/`u\x03\x00', 0x501000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000001480)) dup(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x800, 0x0) pwritev(r4, &(0x7f0000000240)=[{0xffffffffffffffff}], 0x2d9, 0x4081806) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5729d08759781a6800995c0184305e32a840dedcc2f88e4604c6ee9778f11f117f865621e403e7bca8aa9afdf44fff9c18fd003b3257c090fc3446404a7d90eb698a52f7d527998eb863dbffeabc7412c20a714abe16b9d5d6be47851011185fc397cf88c05805d081476dd0000000", @ANYRES16=0x0, @ANYBLOB="10020000000000000000000009410000004c001800000400696200000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000f300"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40001) sendfile(r1, r4, 0x0, 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x87) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) poll(&(0x7f0000001200)=[{r5}, {r2, 0x80c0}], 0x2, 0x1) socket$inet6(0xa, 0x0, 0x4) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) r7 = socket$key(0xf, 0x3, 0x2) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000000c0)='./file1\x00') write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29) sendmmsg(r7, 0x0, 0x0, 0x0) r9 = open(0x0, 0x101000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0x24d4fd88) setsockopt$packet_drop_memb(r9, 0x107, 0x2, 0x0, 0x0) 23:25:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8000000000001c, &(0x7f0000000140)=0x1, 0x4) r1 = socket(0x18, 0x0, 0x3) connect(r1, &(0x7f0000000000)=@sco, 0x12) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x80, 0x5) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x6, 0x105082) r5 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x80ffe) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed6) fcntl$setstatus(r3, 0x4, 0x1) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='\x94\x8e\xe5\xc7L\xeb\x17\x8b\xd7\x9d\xe8\x0e\x1e\xb6\xff\x9b\xbe\x9c\v0x0}, &(0x7f0000000340)=0xb84699fd) syz_open_procfs(r8, &(0x7f0000000380)='envh&on\x00') r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002a80)={'rose0\x00', 0x0}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$inet6(0xa, 0x2, 0x0) close(r12) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r13, 0x20000a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r15, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r15, 0x26, &(0x7f0000000080)) fcntl$lock(r15, 0x26, &(0x7f0000000180)) dup3(r14, r15, 0x0) r16 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x80, 0x51) sendfile(r15, r16, 0x0, 0x1) setsockopt$inet_MCAST_MSFILTER(r13, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="060000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000250613b030000f401000000ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000026000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/527], 0x210) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000002cc0)=0xe8) socket$inet(0x2, 0x2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000032c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8) sendto$inet(r9, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r9, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x3be) setsockopt$sock_int(r9, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r9, &(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=r10, @ANYRES64, @ANYRESHEX=r17], 0xffffffffffffffcc) 23:25:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r10, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000600)) r13 = syz_open_pts(r12, 0x0) read(r13, &(0x7f0000000080)=""/11, 0xb) fstat(r13, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r11, r14}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r16 = socket$inet6(0xa, 0x2, 0x0) r17 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r17, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r19, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r19, 0x40045431, &(0x7f0000000600)) r20 = syz_open_pts(r19, 0x0) read(r20, &(0x7f0000000080)=""/11, 0xb) fstat(r20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r18, r21}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r23 = socket$nl_route(0x10, 0x3, 0x0) splice(r22, 0x0, r23, 0x0, 0x1420000a77, 0x0) r24 = accept4$inet6(r22, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) r25 = memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)=0x0) r27 = eventfd2(0x0, 0x0) fstat(r27, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r28) r29 = socket$inet6(0xa, 0x2, 0x0) r30 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r30, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r30, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r32, 0x40045431, &(0x7f0000000600)) r33 = syz_open_pts(r32, 0x0) read(r33, &(0x7f0000000080)=""/11, 0xb) fstat(r33, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r31, r34}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r35 = eventfd2(0x0, 0x0) fstat(r35, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r36) r37 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r37, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r37, 0xc0502100, &(0x7f0000004780)) r38 = socket$inet6(0xa, 0x2, 0x0) r39 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r39, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r41 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r41, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r41, 0x40045431, &(0x7f0000000600)) r42 = syz_open_pts(r41, 0x0) read(r42, &(0x7f0000000080)=""/11, 0xb) fstat(r42, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r38, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r40, r43}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r44 = eventfd2(0x0, 0x0) fstat(r44, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r45) getgroups(0x1, &(0x7f0000004800)=[r45]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r48 = eventfd2(0x0, 0x0) fstat(r48, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r49) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3, 0x0, 0xffffffffffffffff}) r51 = dup(0xffffffffffffffff) r52 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r52, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r52, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r52, 0x5502) r53 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r54 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r54, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r54, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r54, 0x5502) r55 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r55, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r55, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r55, 0x5502) sendmsg$netlink(r6, &(0x7f0000004a80)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000004680)=[{&(0x7f00000002c0)={0x26c, 0x11, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="473aabff3e99db632852718209b79ef0905e76fbc0ba14d86afb35fe3b0168534a86f240d0f67abab12db29cf72b2477649237cb576962d67f853e67bdf94da49181bfa48a9bedaec6c720656897", @typed={0x8, 0x32, @fd=r8}, @typed={0x8, 0x4e, @uid=r14}, @nested={0x4, 0x82}, @generic="45334636336492840a0fd4c3e81fe9845b1d891baafaa2decc3f97730f23109bd7ba233f5102063bfd3edac570", @typed={0x14, 0x27, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="9d52a1d1048905fc0de05627b9fd33d0198f2f0a9f83089f1939", @typed={0x18, 0x49, @str='system,procselinux\x00'}, @generic="72c6c67bc72d4f75b376a2e0ee8a6623f5c336d8f3e02138bb890846016fd1b9ea49aaba6e080ee0dc6aa835d6bad05a50cb5da9f6728c469b41f3a1937f75848254e6ae0948134688280e2d240b0014742a9f4cd6be4165d05b17348e1625f111f87dceabbad9a1407672025c7895d7768ba52205bb284308b1a1f9fdc4a1d1a86b851d72d8638139bf230246848d8cdfcb0335a838e6b37dff4ac49c5c620086e3c9140c56d0b47480179f8da3e842c4d309e075013f4083e14cc0a525671befce5aa744", @nested={0xc0, 0x27, [@generic="359f40bc0e869ee297058e8771612924ff332744ddfda6a87838297e16ed3caacfa3581a5ad6598192b3697bf6c02bfd902b695204705a02358921084dd9478b9cbcb68d90e371d6d697550e8843e58001e42875c57bbff8e936d672a452f8a030bd7073db23214b726942bf698047ae7e06b7101e1a9fcd81b4509039a692e1b6a91aa97cc9b259e1470bdf3f53c1f9d56743d70e922ebbf95a5f313448057be2fbea7cc49bbbf1eee6fc8a13446190", @typed={0xc, 0x80, @u64=0x11d9}]}]}, 0x26c}, {&(0x7f0000004b00)={0x230, 0x33, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x170, 0x36, [@generic="8e204ea08e529770ef9946bde1fcde60b67072fa991ecb10e24ce4639b9d38cbf22ba2e1840c56260629b3e415dd3cc2eb04e63434d4f71063c78201c60154d378b8cc09ea6716683d6b71313bb6f2bb7dfdfb283b6bf0d91d3cfe9ee7ac6f2d76b173da35c76d38c42e078b74283826121249e28de13b502fc3af90117965e012275a98b96989a304e1d5a9fb07bdc035d1a14b9760af0c4f6a55beb5bd97df56ac6d585c7dd6691f2f40543ad0d27102", @typed={0xc, 0x3c, @u64=0xd67f}, @generic="355003f85ca0056326c4a1cce56410be3a8e70873941399636d06ce3387afff37c9fb26480e1bcf9e62d0969b09c02a35680626d88b21027f01aac63f4b887922f5d34defa44407808cab3068904abf4c3940dbfb3f84be8b7dfc080315edcf8180bf72e921b0b0865e222c557d2f6a6162d443dd98429fda9b13a9ec272e8af48412ac8c4d74799a154a53c163c8bd5ea5f6856a8c04dbdf1e0db5ad66dcb56d080742935c94f8d116128d3766861"]}, @nested={0x4, 0x51}, @nested={0x6c, 0x94, [@typed={0x8, 0x50, @u32=0x4}, @generic="62685c6582b38161ce317701b3b37da96d8b47d6c5e4b99d370a15120b664d900516eb8fde5ab5e8b518dcfa3f0ce0cfc2046dd86d6d83e2bfc26da6c4df1c7eec78cd69840a4c2d128ec5f19e8ea1d80fba4a8660a68aca5bb59c9749"]}, @typed={0x8, 0x27, @pid=r15}, @typed={0x8, 0x68, @ipv4=@remote}, @generic="5f0555c74beb9543f2be86b3b7568e88d42494b82b3f2b736269454fc27dd41406cf7e4a9e5adda04a425026f2e9"]}, 0x230}, {&(0x7f00000007c0)={0x10, 0x33, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000003000)={0x390, 0x28, 0x0, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x4, @ipv6=@rand_addr="129863d8cb8c1ac5f4a68059c16a5c2b"}, @typed={0x8, 0x4, @uid=r21}, @typed={0xc, 0x26, @u64=0xd5d}, @nested={0xc8, 0xa, [@generic, @typed={0x8, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="d4b5829e92cdfead81a6823c7367b632995fa9079f5484d2ed6007c3fedaaf79b9f922bf364d31087e2181746e456beeeb3167c2ab777fb3582468ff400569f6f57acaf9bb9f7355621dedacaa33deb55cae4837df163aaea95c5c70dec6b9ee14de6cc22fe79a0c0653cfb151c177fdfd204fd38c51de1dcc42e51b8b81e7ca59ea5f4dea2b07ed647a4d5d08809068667e15f839f0ab40ef7c", @generic="c95eae751f2c9a8f48de6c93fc7ce95020c9ebe12b6c1e7dae7ebe39575605"]}, @nested={0x190, 0x3e, [@generic="3bcc3aa15ae22e041b666b42e812a0c2a548f5c74a127add9e2b45b7dec60337dfd5c0b0ab18c9349d1876ab0ad487140c50ba02dac49bd5fda96d965902d0369681538064d4da771c7620f440863e618f26c7efbe3f95587d103e2dc7611632eba9c36410370274618f20117a2e3a0cf52bfc541852607521f87c686d27695b7dd7817cacc154731d03937f2964accab14d805c5c33917830f5757c551da9db564aac2844339533bf6130ed1e1bb2de046ff1b3a432b2b0297cd687d26c0c70815c08e75781050d7f045ee4f012022b46b2ac4045c826bc966be3f2ff4b8cd730", @typed={0x8, 0x7a, @fd=r24}, @typed={0x8, 0x1, @u32}, @typed={0x8, 0x0, @u32=0xaf3}, @generic="8fc4e7ff005b41666b83e456bbe76e82438d9b158b2da397e9df9b1a123880271dafc0453ff0bcbed08ed410393a60d34f7214c3d01f9c0cc6a999111800843871b0cd0ba52e9255fb5a20b524a9e60aa5f4561458a69723adc2f336155bf93b3ba42c85fcc94d8b558caa9587aca94b9237dff3321e2657526f13114fa91ce205df924f09cb9a9540f2f808ed3aa9a56d93"]}, @typed={0x100, 0x5e, @binary="a5a1ed26725a833b391266df8bc41a0e99cc5c945eb4093d0778d095a5e593d5fc9e756af7916fae24261ac2395d3ba5c33dfd02a9f72a785da9b14f63a7a39ec4b973722e0d4f9b30fd66928c79f2b5ce26d918235df1c8ed5d384b0375d6f4e3ea16f988747777109e54c055f3766568daf9e37161420749b902e5942ba339b1c8b159efd21240ced44c2ab1a7311a4940edc6d67153baf9755df2d307d86135e62ec7a95feec8647ebce5170ccb30ad7a7db895c995547fc3804ae93b9936abe2ae4285b6f5349006b8e65d6cfdd2b96ec7b188ba1cfd42966bbad7a57d33e8e29715e3afe6d349c00e9c2b2729d0ca1e53d64ae9159e3d"}]}, 0x390}, {&(0x7f00000033c0)={0x11e8, 0x3f, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x117c, 0x36, [@generic="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", @generic="896587088f051be67381d2eedc706e1f46d5abd20f9a99bd89e8699d40bdc51e42dd3e68dd14dc518b0cb28a1bc88e048f98fc029e501c", @typed={0x4, 0x90}, @generic="32249a99ba67ff2cea4dd97d8c9047c2f5f65d91b4f4ed8e2b12e284ed459a55d93b7226296005075b22ef6e095532a4b1ccfcaaf87c198b", @generic="df30f9cbc10b249f72fe158ff31c2bd994dba4f62f00e12a16f4743ebc9cdc478e39451518353e81fdf842ad6d1b3f8fc9e4a62178b979ecb02f0675b79a6604", @generic="34cc18560c278faa62023a50c4c3363627c2f4bdd6157429424af7548105721f05d295edd11e81646778431632a8bfa46659b33f2edb2283aff9a3cafc9ba5fa9b30a61094ba560d112933829dc387c1d48cd5664897469c406b7c12ac80e7e931e873216d8b57ba89a5f43fe2ce6d17be2f7af9ddf1d3260bb37e8dae1ad93b63a5ef1845de0d86707bc2ad994116372ba1eca50d9dc1999aa276b55f839f2c3f2241f6490f26461d7afa9367a1609642f31c0d76799db7f10bb89a924df0b2a35ed9"]}, @nested={0x5c, 0x91, [@generic="0584239dcbd29f2842fd07cbdf4fb6a1f0", @generic="d5de93d0b51d9a95efc104d6ad78b2e67ce296d08d947c58ed101262dc459d6a1a531f83364d47c53fb9176cc968bccf54ee107ec1be9a4368e0b9eee22b360a", @typed={0x4, 0x66}]}]}, 0x11e8}, {&(0x7f00000045c0)={0x14, 0x1d, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x78}]}, 0x14}, {&(0x7f0000004600)={0x78, 0x10, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x68, 0x7b, @binary="329339c5fcac2960e64fe40c3cbdd8d1cf7f7572937e28bf01956646f59b509795eb40cf4c91c329137a06e3403c2d434937c3bd55c2666c598f4229f118b8cd42323833bb37326f48c5a2abc5a8d246f21b47ce8b21ee08bf30939bd77add7e1b"}]}, 0x78}], 0x7, &(0x7f0000005000)=[@rights={{0x18, 0x1, 0x1, [r25, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r26, r28}}}, @cred={{0x1c, 0x1, 0x2, {r5, r34, r36}}}, @rights={{0x2c, 0x1, 0x1, [r37, r50, r51, r52, r53, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r46, r47, r49}}}], 0xa8, 0x4000}, 0x800) 23:25:54 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:54 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() time(&(0x7f0000000180)) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x4000000, @remote, 0x3}, 0x1c) ptrace$cont(0x9, r0, 0x0, 0x0) 23:25:54 executing program 0: r0 = memfd_create(&(0x7f0000000140)='$B6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000b649ffaa000000000000e5000000000020380003"], 0x39) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x100000001) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:25:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r10, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000600)) r13 = syz_open_pts(r12, 0x0) read(r13, &(0x7f0000000080)=""/11, 0xb) fstat(r13, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r11, r14}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r16 = socket$inet6(0xa, 0x2, 0x0) r17 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r17, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r19, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r19, 0x40045431, &(0x7f0000000600)) r20 = syz_open_pts(r19, 0x0) read(r20, &(0x7f0000000080)=""/11, 0xb) fstat(r20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r18, r21}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r23 = socket$nl_route(0x10, 0x3, 0x0) splice(r22, 0x0, r23, 0x0, 0x1420000a77, 0x0) r24 = accept4$inet6(r22, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) r25 = memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)=0x0) r27 = eventfd2(0x0, 0x0) fstat(r27, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r28) r29 = socket$inet6(0xa, 0x2, 0x0) r30 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r30, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r30, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r32, 0x40045431, &(0x7f0000000600)) r33 = syz_open_pts(r32, 0x0) read(r33, &(0x7f0000000080)=""/11, 0xb) fstat(r33, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r31, r34}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r35 = eventfd2(0x0, 0x0) fstat(r35, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r36) r37 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r37, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r37, 0xc0502100, &(0x7f0000004780)) r38 = socket$inet6(0xa, 0x2, 0x0) r39 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r39, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r41 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r41, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r41, 0x40045431, &(0x7f0000000600)) r42 = syz_open_pts(r41, 0x0) read(r42, &(0x7f0000000080)=""/11, 0xb) fstat(r42, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r38, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r40, r43}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r44 = eventfd2(0x0, 0x0) fstat(r44, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r45) getgroups(0x1, &(0x7f0000004800)=[r45]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r48 = eventfd2(0x0, 0x0) fstat(r48, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r49) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3, 0x0, 0xffffffffffffffff}) r51 = dup(0xffffffffffffffff) r52 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r52, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r52, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r52, 0x5502) r53 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r54 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r54, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r54, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r54, 0x5502) r55 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r55, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r55, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r55, 0x5502) sendmsg$netlink(r6, &(0x7f0000004a80)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000004680)=[{&(0x7f00000002c0)={0x26c, 0x11, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="473aabff3e99db632852718209b79ef0905e76fbc0ba14d86afb35fe3b0168534a86f240d0f67abab12db29cf72b2477649237cb576962d67f853e67bdf94da49181bfa48a9bedaec6c720656897", @typed={0x8, 0x32, @fd=r8}, @typed={0x8, 0x4e, @uid=r14}, @nested={0x4, 0x82}, @generic="45334636336492840a0fd4c3e81fe9845b1d891baafaa2decc3f97730f23109bd7ba233f5102063bfd3edac570", @typed={0x14, 0x27, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="9d52a1d1048905fc0de05627b9fd33d0198f2f0a9f83089f1939", @typed={0x18, 0x49, @str='system,procselinux\x00'}, @generic="72c6c67bc72d4f75b376a2e0ee8a6623f5c336d8f3e02138bb890846016fd1b9ea49aaba6e080ee0dc6aa835d6bad05a50cb5da9f6728c469b41f3a1937f75848254e6ae0948134688280e2d240b0014742a9f4cd6be4165d05b17348e1625f111f87dceabbad9a1407672025c7895d7768ba52205bb284308b1a1f9fdc4a1d1a86b851d72d8638139bf230246848d8cdfcb0335a838e6b37dff4ac49c5c620086e3c9140c56d0b47480179f8da3e842c4d309e075013f4083e14cc0a525671befce5aa744", @nested={0xc0, 0x27, [@generic="359f40bc0e869ee297058e8771612924ff332744ddfda6a87838297e16ed3caacfa3581a5ad6598192b3697bf6c02bfd902b695204705a02358921084dd9478b9cbcb68d90e371d6d697550e8843e58001e42875c57bbff8e936d672a452f8a030bd7073db23214b726942bf698047ae7e06b7101e1a9fcd81b4509039a692e1b6a91aa97cc9b259e1470bdf3f53c1f9d56743d70e922ebbf95a5f313448057be2fbea7cc49bbbf1eee6fc8a13446190", @typed={0xc, 0x80, @u64=0x11d9}]}]}, 0x26c}, {&(0x7f0000004b00)={0x230, 0x33, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x170, 0x36, [@generic="8e204ea08e529770ef9946bde1fcde60b67072fa991ecb10e24ce4639b9d38cbf22ba2e1840c56260629b3e415dd3cc2eb04e63434d4f71063c78201c60154d378b8cc09ea6716683d6b71313bb6f2bb7dfdfb283b6bf0d91d3cfe9ee7ac6f2d76b173da35c76d38c42e078b74283826121249e28de13b502fc3af90117965e012275a98b96989a304e1d5a9fb07bdc035d1a14b9760af0c4f6a55beb5bd97df56ac6d585c7dd6691f2f40543ad0d27102", @typed={0xc, 0x3c, @u64=0xd67f}, @generic="355003f85ca0056326c4a1cce56410be3a8e70873941399636d06ce3387afff37c9fb26480e1bcf9e62d0969b09c02a35680626d88b21027f01aac63f4b887922f5d34defa44407808cab3068904abf4c3940dbfb3f84be8b7dfc080315edcf8180bf72e921b0b0865e222c557d2f6a6162d443dd98429fda9b13a9ec272e8af48412ac8c4d74799a154a53c163c8bd5ea5f6856a8c04dbdf1e0db5ad66dcb56d080742935c94f8d116128d3766861"]}, @nested={0x4, 0x51}, @nested={0x6c, 0x94, [@typed={0x8, 0x50, @u32=0x4}, @generic="62685c6582b38161ce317701b3b37da96d8b47d6c5e4b99d370a15120b664d900516eb8fde5ab5e8b518dcfa3f0ce0cfc2046dd86d6d83e2bfc26da6c4df1c7eec78cd69840a4c2d128ec5f19e8ea1d80fba4a8660a68aca5bb59c9749"]}, @typed={0x8, 0x27, @pid=r15}, @typed={0x8, 0x68, @ipv4=@remote}, @generic="5f0555c74beb9543f2be86b3b7568e88d42494b82b3f2b736269454fc27dd41406cf7e4a9e5adda04a425026f2e9"]}, 0x230}, {&(0x7f00000007c0)={0x10, 0x33, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000003000)={0x390, 0x28, 0x0, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x4, @ipv6=@rand_addr="129863d8cb8c1ac5f4a68059c16a5c2b"}, @typed={0x8, 0x4, @uid=r21}, @typed={0xc, 0x26, @u64=0xd5d}, @nested={0xc8, 0xa, [@generic, @typed={0x8, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="d4b5829e92cdfead81a6823c7367b632995fa9079f5484d2ed6007c3fedaaf79b9f922bf364d31087e2181746e456beeeb3167c2ab777fb3582468ff400569f6f57acaf9bb9f7355621dedacaa33deb55cae4837df163aaea95c5c70dec6b9ee14de6cc22fe79a0c0653cfb151c177fdfd204fd38c51de1dcc42e51b8b81e7ca59ea5f4dea2b07ed647a4d5d08809068667e15f839f0ab40ef7c", @generic="c95eae751f2c9a8f48de6c93fc7ce95020c9ebe12b6c1e7dae7ebe39575605"]}, @nested={0x190, 0x3e, [@generic="3bcc3aa15ae22e041b666b42e812a0c2a548f5c74a127add9e2b45b7dec60337dfd5c0b0ab18c9349d1876ab0ad487140c50ba02dac49bd5fda96d965902d0369681538064d4da771c7620f440863e618f26c7efbe3f95587d103e2dc7611632eba9c36410370274618f20117a2e3a0cf52bfc541852607521f87c686d27695b7dd7817cacc154731d03937f2964accab14d805c5c33917830f5757c551da9db564aac2844339533bf6130ed1e1bb2de046ff1b3a432b2b0297cd687d26c0c70815c08e75781050d7f045ee4f012022b46b2ac4045c826bc966be3f2ff4b8cd730", @typed={0x8, 0x7a, @fd=r24}, @typed={0x8, 0x1, @u32}, @typed={0x8, 0x0, @u32=0xaf3}, @generic="8fc4e7ff005b41666b83e456bbe76e82438d9b158b2da397e9df9b1a123880271dafc0453ff0bcbed08ed410393a60d34f7214c3d01f9c0cc6a999111800843871b0cd0ba52e9255fb5a20b524a9e60aa5f4561458a69723adc2f336155bf93b3ba42c85fcc94d8b558caa9587aca94b9237dff3321e2657526f13114fa91ce205df924f09cb9a9540f2f808ed3aa9a56d93"]}, @typed={0x100, 0x5e, @binary="a5a1ed26725a833b391266df8bc41a0e99cc5c945eb4093d0778d095a5e593d5fc9e756af7916fae24261ac2395d3ba5c33dfd02a9f72a785da9b14f63a7a39ec4b973722e0d4f9b30fd66928c79f2b5ce26d918235df1c8ed5d384b0375d6f4e3ea16f988747777109e54c055f3766568daf9e37161420749b902e5942ba339b1c8b159efd21240ced44c2ab1a7311a4940edc6d67153baf9755df2d307d86135e62ec7a95feec8647ebce5170ccb30ad7a7db895c995547fc3804ae93b9936abe2ae4285b6f5349006b8e65d6cfdd2b96ec7b188ba1cfd42966bbad7a57d33e8e29715e3afe6d349c00e9c2b2729d0ca1e53d64ae9159e3d"}]}, 0x390}, {&(0x7f00000033c0)={0x11e8, 0x3f, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x117c, 0x36, [@generic="80bfa7ea412d0e0ac84604b75dda385b68a95d8a09a17a630095404986873819bdc1c0660d592261e94330ecb7d53a2903e932745c3484a5208bd8bd48045447d9b5673ce0008a695edda47df495d532ee17141bf67901d33480c5cf0f2db5cb093941036c0090515af4915023b211f204eafe3b34f3d4b21d8b81436f10316b744cb6436ac72172b7381d1faea3878b87da54007366c3264ef2dc9cd3b3e9bc0cc33d3f65b89624d7baea4764a0a42207b8ee6f495710e499cc7ae554006fa47efad71d87f6c7abd8bc132440ca10dfdd063855abd8b4ce82e0106aa7ae4428ae083bcf20e2ef18a7f438b938c0c2b714da543faff8cd69b41281cf612f5b66eb7aa0433814e58f12bafed3317c31cbb6cc51dec935602d301f9873cb6f2ae2784aae3c1c58ab46fd95d532428f7573c3622f5421e20a148a36ff9b0da28034cfa5d658e6b7b7c0df32f2b8490c1f63e0a511fc9b9409c771d6ad3922da28aa2f8c8d7f1387e8aff75b9a88086d685a8e473643ac642b08ae04a5e0b4cb56b0b7be5e7069414270e21af213d0e902e63a9b26cf66c7b8ea5f14706922247a7b6f72f14e88e8dd3b36ec479df2c7294f24e6bc20b0c7fa9d6e90bdcfdb9044ded4d069485f1c6950b26e19a496fc318aedbee79df3f94a81a44e1a05f748a27214c43500ff0ac77d33019cf581b47974d62885f464e97843976b7482a27459f962f68896c466ee01f9bbcb682cce2c2e20594152cbf330e3d1a825b9abd6f965b3996367c2791b3477f12e359ff398faac979e8586056e4a835caee1d150bd46210dbb13c8e4fff9e897a4f8e21894be996eb16541ac7ce66926b9d86268199f228890532aaa9ed20e758e0a145b3690548c1696218eeae94538a421104186261c4fad439dcec5154cdff15cb5eef55a99e932baa5eee763fcbad83a172530db9ba1d806d0f03117c7049265fff8566893838ee8c78abb12bbfcbc56caa792338866e9282141185592ffe1e182ec8249c8d20b9e3c34ce87db33b188b5c867a6d6a4015165156b01bac26dc8a97fd32a4c69c4a966c231156f0f9e70a86b7185371367ebacfa0e4ffe81b2d823479761b25166d2edd44a87cd74a01f689c73ab28f777c948939e09a0e5cd6684bbb6d76cecee0e4077479e14875bd6e3e41b4603e766be67761e163ebc16e7a19408d120754c6a0c954db40b6a6706283e7f80383ab2e97a273b8fa068faeb549433d06b74665a888bd7cff1a6e959793f3daedb02c933efccd5e87f1a6be7b086b449884ba3cf26a7e3504b4c7afeff3522c4ff6f4119725daec795ee72224737891181ad9e749bd9b8a2ee753eb43f27a285f52002a16fb03ab36d5585c5c43301217abeaa968c4c4ac65938df95acd99c3907264375df7ea5b1a1ce478272b7aea141fd7468191dffcb162b2b90ec23fb439c3eb74d9143fe6801b6ad9038d2ba966cf43418b2a6987ce0bb518d6868256b311c9ac6ee5725fcf5e719371c992661690f956bc292154258baeac5ae262dca9ba1eced1907f47ba0b17cdd8a5d59f16f89dccba8e0bab581b23fb85cfb8d6bc8a90c10d0fa96476fd6d293d5556c9fda798c7ddcaa0a0d38c621a5c14ef9e769cedb29d3a4bf4ec120db894d1239ea4679884f395e1658452dfc3c376dccd557435f6bb326a0cce7ef445d1794f3bc32b1d583c6ef4317ed4fc7d48a61d6ab991101c91e39abc6187c7f521076b8f7110cb723305a997fec127795064b591d7027024865526196a54a959584a23335233ae1e963c7e1a16c7a085fa8a2924a43190344584a34c7cfa8902a88438c8ec62b267ed74d56b964be0d7737ca0543fc551c5659cafb2b7bc29dd479ebb1ee3e3dbad6fabddf0130a76fceff833ffd066a61fa802d94cf04c682944482517a33604b53b04a1d648b3e222548fbe39105d77488c6b72fb836338b6300f35d40bd2f7cf9e51a8164bb10f63b2f480094965142d5117ab4abf2052da561782565d357dd1ba01b42d4d61df6bf6e68593cd1ac38f0c6577455155b159dd0403fec4ba3ad6b0001daab374ff66d9b96152cf6e49a4faa017ee47fe73a1c69bd31421f006b8954f6099d6d02d6f9914d2494fada3fa6f00543189a57f9281bba95e26914f729ef48a2ace2204995cba76633a565535446118e7790de9c509631b313f7e28d9e1d10ed233c0d5dd0522bc881afc9cd962f1101c30ee983d2ab39eb7f01a7eca9a2a39055645b584aad1625b81482b29a559f6e81cf782ae185ad2481fa7ad27a1880f9aafa30566fb83fc5eeb9eaaddd97aeb21f1a38cf5af702914f853aef262f5f33107488c1f3cb255e8e5c57f56b510a17774bd44712d556aa69a42cbd056826bd0d65ddcadbcc8e42c107c045f6239496e28553fa801cc75ac8c6ae78e1d0800cf608551471995eab079657b37e6597484a820ae2cbc20735efa6826277fab50fb7aba18cfc6a62a49a11fa2a3f2e1345cbbe498c230bcb376a0d822a7904065e884696933196e790ec25c87fab4f90148a9c277e612abe6399e47be81a438a297cc658b326b16ddd4d25f9abacd8c9d7059fbc606d460b22da8d66edfdf0c891edd6867f891d04575ca704ef51fb043a36a0f9f1dcece14b48f3f66b15613741dafbd8d7d28417f8689afebe2bc54d48c8528b5adfb244ce8c19e069842aed6717dd28af0725fd468ea5a29149f02b8aafd2115c3adf7d139dcc162eef28300c481ebba246951554b0d406273d33fcf5c1d3e8710f5e1d0975215213f64040f92121a878427cff58609f3a363e980039432993b81464f69e683713519998e7fc035a78451214c29ccc40e95873f1af6001bdd946ed7490c878f1ee15ca5a70e71be8b408fa8c640809174672f1d0795b73e45c346471d5d4dc90d33480ac2a3c4bd9929519f73feb5a7e7eca931bc26fa96301741de4e2affc4e908200a2e267440876b5f2bb6b9f1cb5cd0ddd0234e12b44cfae9a44b2e6c0709f2dde9a9db11d57e98fbc845314f1ad474ab227f0aed2b998286e04382bef4a289cdc3cb27084d6b05bad0b7bc57d55e67798962cb1760060fa5a41107d4835914b33ed8180ee0b2a5c0a500436281f7eb1838f96b1dcc0489d28f4ba964e2aa7803fbe2ca6f0f12a57294e230cc360ce2faaa4f3601459f10370450d4fdd9a8f60669dcc10aecceb878439c385fabf2c7ea3a4b05e48d8a28a1a69be2b41f9fdeec09aaebcc6de88b4127cb651cf3836e5385ff0536d6ee23525c1e62dceb790274372dd6f63c9f8cdcdc21cdd6b3444519918f475be55bc5e57212d2e91dde0f5c5482a791b4af0fddf7f897cc0f778cfb114e8ad258d9499c1bef3d6ad9fe04612e461bc28c1d8014581d49f0c89f04a7d6fae274d45d54ab97be7ecf86c96618d3c506c752a6dbed9dbe18650e9f6d475a613b81041371da2b82e5553e442e46760271987fd80ea175f986d254c24e3473828b820e8fc0748eb9c4c291e8b9413bad171acb4981b213fec22314ce9d2468d07f5f97b4c090a6e1daf25a4c9535a980c0a3d3c08f8286e8b9cf4802bd85091287ce3c0292566014d615111ee1ca6d3b0f87c037be8202fbd6e0047203b21bc8f708fae50971330862c72224c2d267958117516e724b1251a47cd08eecec043ab2199f7810d32c46185147e85ddea8115f8cf379bce7219befa6f7a3554e775a92c37f491de716f47016daf0d432a21fc0395da968e2626c7fcedf312d1178b3fd5a084f53c721b56b12fdfbd71f6a7acfa01e0daef42f966416a7737297d50acfad0769f8aa3bc8addd4e16bf677570e57c086f62ad80d574b0a21f220e79b42525e57ac1a2eca4559ddc47a037de5e9450f0a77b88b9bff8efa70693dbb0369a32a44dd061f5a6bdc6d59e9c60ef8fd8ccba9d6f91585349b050c1b61ea8649830b9e37633a39ebd3d186cb5fc6d21217870d1c33766a377581d0c371ab3d858cb9c5a1a3dddbc60c99a7c860fa4d637f61b9067ae6363c498d4151f6d219d96c6a6619576abf74f8e15c69556c8c5459ed847e0646f64a5c4541fc28819bdf5dd071c1b5383045fff36d68f5ee96316f0bbfa9a35a28c1173aa49445a21a756972780fbc500d5395b47d1b5543f4faa39e9951c3ff8ff8c1e573315789ea1c6a50bd3e31107027f71e4b6dfd72a8c9c744c0737e0a2c384bd54db11c0b5f0434e55420b7e8cbe304eaeb68040448586a143659f19c036952e3cd0ef8732c0d378be55531337288f8fb91d2f77a0c70dece9803b7e100e0bbc5632e5e6d22b00ecd03c779b243db887f47f183c211a0d1818b884fc2d3a61020f6691398ee8a32ff8414641e13b760930c64d62c7cae314151e0c3e3cafdf759837a0eed01425cfaaec310e803e662ed5695ac8fde2417a9735f42c6f55c68780d35bae69508371916aae50793579b6d335da3fc31935b614c5ae1e5f59f454614a989b17e06c11e5c56bcd4e155343986d1babffb2beb7f5a9cc1e16a54219ea34cdb98ef15949b20a6848760140d406b501cd89fe3eca1eb8cb04bce6b977154a055721cd400bbd59ee5ee512da6fae290db3e07639a0e7ce347ddb0c8d1f8fcbc7f8f441ef9ee0973cb0cf2b49932a13f059f1f270e1766d4972a99b4f27032bb4f47260640546d22a7736cdeb49c315aa5b67b797095c32da086098fe6a97168d81e0464ff292ea6b719082c84d59bf9e7f88134993c773c9f001ea1b2d1fd4a20d99520d9761f57ff1d4ea76b5142498906eb8d0e06d1a7d9961d9eeb6f08b87f33d8622fb6e0d6997bb1c92def436dfc8cf8ac90453649214f3f09d86b31a408e081be4c2102ef38bcab0138ec0f74a3d715fe687b25d63df2102ae3758b7da3d49968955299b207815562367d08f8b968ed4902181926ed7ad1bc594e3c93d1b7b7fcb45e63a1c4e090ce5f04d9498feba48cdfc06579f90eaf69684b8e2833f5b470d5121e38335431457d4f145100738ae7bc9240cd725b05b4990c63f8c9f0bc8977cb5597e5085191d33ede302df711ee4b01c8ec2dd3acb7b3024d4e6505bab05fc5b67b166b6a0e7ad111756c21776f7836821f42ba835a1052e4936c1405b8c07f91a8701288179c43a3f4c42c4a73ee727ad639fffd096cce7fa1b6abb7f95a11cd4a591d71a51e33608b7b90d3aae4bb3f2f996d22c2ea24585706ea172bab14599b6834079f9de5d007d0858fb3009e01c6d202baa35abc671d62a51971f8163f36bf40d973183a0a380c82f8b11108b2db78fcddbeda43b3c2df4e71246219c2fe2d81d16d2a8cabe090034b135e00b94587b97fd51573ae63fb0df265aa3b17214dda64e3a3ee1d49e72e20a0f02fafe01a9ea852e4219bf0eaef891e82dc38c455d36f13f4055d7fd168d3a92b635705e3b373e90227df33a249cb12aa219faeda7e0152b19592298d6c6855bfdca8fd59c6343b07768e9005b03f705d82a94e2c356f1c8cb191e9338c3b14d0265329d209c67b88cffef23ceb328ac85b95214aa5ddb2a69e2825573225288f1e3f6dd163ac574e8f9b39aa80f5d3d31261f649a19aa697851e404f871fb1682351f99b87d6ba719a2ff0e166a5692a1ff500e320a925f49d06f0244d332777cabe18ccdcdfc4e221f28a6be5e52867f2df4c5729c60bad1eb1af4fd8fa02699963e44e6c8aaad95b31b4c011c2983461eff10233bab8c224e8523a100c5be0cf1254145e0547592e6bc11d8197b6f28ae1b6616f00ded0ed1a5558d7388c379c03253e278fc96231", @generic="896587088f051be67381d2eedc706e1f46d5abd20f9a99bd89e8699d40bdc51e42dd3e68dd14dc518b0cb28a1bc88e048f98fc029e501c", @typed={0x4, 0x90}, @generic="32249a99ba67ff2cea4dd97d8c9047c2f5f65d91b4f4ed8e2b12e284ed459a55d93b7226296005075b22ef6e095532a4b1ccfcaaf87c198b", @generic="df30f9cbc10b249f72fe158ff31c2bd994dba4f62f00e12a16f4743ebc9cdc478e39451518353e81fdf842ad6d1b3f8fc9e4a62178b979ecb02f0675b79a6604", @generic="34cc18560c278faa62023a50c4c3363627c2f4bdd6157429424af7548105721f05d295edd11e81646778431632a8bfa46659b33f2edb2283aff9a3cafc9ba5fa9b30a61094ba560d112933829dc387c1d48cd5664897469c406b7c12ac80e7e931e873216d8b57ba89a5f43fe2ce6d17be2f7af9ddf1d3260bb37e8dae1ad93b63a5ef1845de0d86707bc2ad994116372ba1eca50d9dc1999aa276b55f839f2c3f2241f6490f26461d7afa9367a1609642f31c0d76799db7f10bb89a924df0b2a35ed9"]}, @nested={0x5c, 0x91, [@generic="0584239dcbd29f2842fd07cbdf4fb6a1f0", @generic="d5de93d0b51d9a95efc104d6ad78b2e67ce296d08d947c58ed101262dc459d6a1a531f83364d47c53fb9176cc968bccf54ee107ec1be9a4368e0b9eee22b360a", @typed={0x4, 0x66}]}]}, 0x11e8}, {&(0x7f00000045c0)={0x14, 0x1d, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x78}]}, 0x14}, {&(0x7f0000004600)={0x78, 0x10, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x68, 0x7b, @binary="329339c5fcac2960e64fe40c3cbdd8d1cf7f7572937e28bf01956646f59b509795eb40cf4c91c329137a06e3403c2d434937c3bd55c2666c598f4229f118b8cd42323833bb37326f48c5a2abc5a8d246f21b47ce8b21ee08bf30939bd77add7e1b"}]}, 0x78}], 0x7, &(0x7f0000005000)=[@rights={{0x18, 0x1, 0x1, [r25, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r26, r28}}}, @cred={{0x1c, 0x1, 0x2, {r5, r34, r36}}}, @rights={{0x2c, 0x1, 0x1, [r37, r50, r51, r52, r53, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r46, r47, r49}}}], 0xa8, 0x4000}, 0x800) [ 1116.577929] input: syz1 as /devices/virtual/input/input2022 23:25:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r10, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000600)) r13 = syz_open_pts(r12, 0x0) read(r13, &(0x7f0000000080)=""/11, 0xb) fstat(r13, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r11, r14}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r16 = socket$inet6(0xa, 0x2, 0x0) r17 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r17, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r19, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r19, 0x40045431, &(0x7f0000000600)) r20 = syz_open_pts(r19, 0x0) read(r20, &(0x7f0000000080)=""/11, 0xb) fstat(r20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r18, r21}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r23 = socket$nl_route(0x10, 0x3, 0x0) splice(r22, 0x0, r23, 0x0, 0x1420000a77, 0x0) r24 = accept4$inet6(r22, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) r25 = memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)=0x0) r27 = eventfd2(0x0, 0x0) fstat(r27, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r28) r29 = socket$inet6(0xa, 0x2, 0x0) r30 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r30, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r30, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r32, 0x40045431, &(0x7f0000000600)) r33 = syz_open_pts(r32, 0x0) read(r33, &(0x7f0000000080)=""/11, 0xb) fstat(r33, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r31, r34}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r35 = eventfd2(0x0, 0x0) fstat(r35, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r36) r37 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r37, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r37, 0xc0502100, &(0x7f0000004780)) r38 = socket$inet6(0xa, 0x2, 0x0) r39 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r39, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r41 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r41, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r41, 0x40045431, &(0x7f0000000600)) r42 = syz_open_pts(r41, 0x0) read(r42, &(0x7f0000000080)=""/11, 0xb) fstat(r42, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r38, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r40, r43}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r44 = eventfd2(0x0, 0x0) fstat(r44, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r45) getgroups(0x1, &(0x7f0000004800)=[r45]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r48 = eventfd2(0x0, 0x0) fstat(r48, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r49) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3, 0x0, 0xffffffffffffffff}) r51 = dup(0xffffffffffffffff) r52 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r52, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r52, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r52, 0x5502) r53 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r54 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r54, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r54, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r54, 0x5502) r55 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r55, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r55, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r55, 0x5502) sendmsg$netlink(r6, &(0x7f0000004a80)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000004680)=[{&(0x7f00000002c0)={0x26c, 0x11, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="473aabff3e99db632852718209b79ef0905e76fbc0ba14d86afb35fe3b0168534a86f240d0f67abab12db29cf72b2477649237cb576962d67f853e67bdf94da49181bfa48a9bedaec6c720656897", @typed={0x8, 0x32, @fd=r8}, @typed={0x8, 0x4e, @uid=r14}, @nested={0x4, 0x82}, @generic="45334636336492840a0fd4c3e81fe9845b1d891baafaa2decc3f97730f23109bd7ba233f5102063bfd3edac570", @typed={0x14, 0x27, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="9d52a1d1048905fc0de05627b9fd33d0198f2f0a9f83089f1939", @typed={0x18, 0x49, @str='system,procselinux\x00'}, @generic="72c6c67bc72d4f75b376a2e0ee8a6623f5c336d8f3e02138bb890846016fd1b9ea49aaba6e080ee0dc6aa835d6bad05a50cb5da9f6728c469b41f3a1937f75848254e6ae0948134688280e2d240b0014742a9f4cd6be4165d05b17348e1625f111f87dceabbad9a1407672025c7895d7768ba52205bb284308b1a1f9fdc4a1d1a86b851d72d8638139bf230246848d8cdfcb0335a838e6b37dff4ac49c5c620086e3c9140c56d0b47480179f8da3e842c4d309e075013f4083e14cc0a525671befce5aa744", @nested={0xc0, 0x27, [@generic="359f40bc0e869ee297058e8771612924ff332744ddfda6a87838297e16ed3caacfa3581a5ad6598192b3697bf6c02bfd902b695204705a02358921084dd9478b9cbcb68d90e371d6d697550e8843e58001e42875c57bbff8e936d672a452f8a030bd7073db23214b726942bf698047ae7e06b7101e1a9fcd81b4509039a692e1b6a91aa97cc9b259e1470bdf3f53c1f9d56743d70e922ebbf95a5f313448057be2fbea7cc49bbbf1eee6fc8a13446190", @typed={0xc, 0x80, @u64=0x11d9}]}]}, 0x26c}, {&(0x7f0000004b00)={0x230, 0x33, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x170, 0x36, [@generic="8e204ea08e529770ef9946bde1fcde60b67072fa991ecb10e24ce4639b9d38cbf22ba2e1840c56260629b3e415dd3cc2eb04e63434d4f71063c78201c60154d378b8cc09ea6716683d6b71313bb6f2bb7dfdfb283b6bf0d91d3cfe9ee7ac6f2d76b173da35c76d38c42e078b74283826121249e28de13b502fc3af90117965e012275a98b96989a304e1d5a9fb07bdc035d1a14b9760af0c4f6a55beb5bd97df56ac6d585c7dd6691f2f40543ad0d27102", @typed={0xc, 0x3c, @u64=0xd67f}, @generic="355003f85ca0056326c4a1cce56410be3a8e70873941399636d06ce3387afff37c9fb26480e1bcf9e62d0969b09c02a35680626d88b21027f01aac63f4b887922f5d34defa44407808cab3068904abf4c3940dbfb3f84be8b7dfc080315edcf8180bf72e921b0b0865e222c557d2f6a6162d443dd98429fda9b13a9ec272e8af48412ac8c4d74799a154a53c163c8bd5ea5f6856a8c04dbdf1e0db5ad66dcb56d080742935c94f8d116128d3766861"]}, @nested={0x4, 0x51}, @nested={0x6c, 0x94, [@typed={0x8, 0x50, @u32=0x4}, @generic="62685c6582b38161ce317701b3b37da96d8b47d6c5e4b99d370a15120b664d900516eb8fde5ab5e8b518dcfa3f0ce0cfc2046dd86d6d83e2bfc26da6c4df1c7eec78cd69840a4c2d128ec5f19e8ea1d80fba4a8660a68aca5bb59c9749"]}, @typed={0x8, 0x27, @pid=r15}, @typed={0x8, 0x68, @ipv4=@remote}, @generic="5f0555c74beb9543f2be86b3b7568e88d42494b82b3f2b736269454fc27dd41406cf7e4a9e5adda04a425026f2e9"]}, 0x230}, {&(0x7f00000007c0)={0x10, 0x33, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000003000)={0x390, 0x28, 0x0, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x4, @ipv6=@rand_addr="129863d8cb8c1ac5f4a68059c16a5c2b"}, @typed={0x8, 0x4, @uid=r21}, @typed={0xc, 0x26, @u64=0xd5d}, @nested={0xc8, 0xa, [@generic, @typed={0x8, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="d4b5829e92cdfead81a6823c7367b632995fa9079f5484d2ed6007c3fedaaf79b9f922bf364d31087e2181746e456beeeb3167c2ab777fb3582468ff400569f6f57acaf9bb9f7355621dedacaa33deb55cae4837df163aaea95c5c70dec6b9ee14de6cc22fe79a0c0653cfb151c177fdfd204fd38c51de1dcc42e51b8b81e7ca59ea5f4dea2b07ed647a4d5d08809068667e15f839f0ab40ef7c", @generic="c95eae751f2c9a8f48de6c93fc7ce95020c9ebe12b6c1e7dae7ebe39575605"]}, @nested={0x190, 0x3e, [@generic="3bcc3aa15ae22e041b666b42e812a0c2a548f5c74a127add9e2b45b7dec60337dfd5c0b0ab18c9349d1876ab0ad487140c50ba02dac49bd5fda96d965902d0369681538064d4da771c7620f440863e618f26c7efbe3f95587d103e2dc7611632eba9c36410370274618f20117a2e3a0cf52bfc541852607521f87c686d27695b7dd7817cacc154731d03937f2964accab14d805c5c33917830f5757c551da9db564aac2844339533bf6130ed1e1bb2de046ff1b3a432b2b0297cd687d26c0c70815c08e75781050d7f045ee4f012022b46b2ac4045c826bc966be3f2ff4b8cd730", @typed={0x8, 0x7a, @fd=r24}, @typed={0x8, 0x1, @u32}, @typed={0x8, 0x0, @u32=0xaf3}, @generic="8fc4e7ff005b41666b83e456bbe76e82438d9b158b2da397e9df9b1a123880271dafc0453ff0bcbed08ed410393a60d34f7214c3d01f9c0cc6a999111800843871b0cd0ba52e9255fb5a20b524a9e60aa5f4561458a69723adc2f336155bf93b3ba42c85fcc94d8b558caa9587aca94b9237dff3321e2657526f13114fa91ce205df924f09cb9a9540f2f808ed3aa9a56d93"]}, @typed={0x100, 0x5e, @binary="a5a1ed26725a833b391266df8bc41a0e99cc5c945eb4093d0778d095a5e593d5fc9e756af7916fae24261ac2395d3ba5c33dfd02a9f72a785da9b14f63a7a39ec4b973722e0d4f9b30fd66928c79f2b5ce26d918235df1c8ed5d384b0375d6f4e3ea16f988747777109e54c055f3766568daf9e37161420749b902e5942ba339b1c8b159efd21240ced44c2ab1a7311a4940edc6d67153baf9755df2d307d86135e62ec7a95feec8647ebce5170ccb30ad7a7db895c995547fc3804ae93b9936abe2ae4285b6f5349006b8e65d6cfdd2b96ec7b188ba1cfd42966bbad7a57d33e8e29715e3afe6d349c00e9c2b2729d0ca1e53d64ae9159e3d"}]}, 0x390}, {&(0x7f00000033c0)={0x11e8, 0x3f, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x117c, 0x36, [@generic="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", @generic="896587088f051be67381d2eedc706e1f46d5abd20f9a99bd89e8699d40bdc51e42dd3e68dd14dc518b0cb28a1bc88e048f98fc029e501c", @typed={0x4, 0x90}, @generic="32249a99ba67ff2cea4dd97d8c9047c2f5f65d91b4f4ed8e2b12e284ed459a55d93b7226296005075b22ef6e095532a4b1ccfcaaf87c198b", @generic="df30f9cbc10b249f72fe158ff31c2bd994dba4f62f00e12a16f4743ebc9cdc478e39451518353e81fdf842ad6d1b3f8fc9e4a62178b979ecb02f0675b79a6604", @generic="34cc18560c278faa62023a50c4c3363627c2f4bdd6157429424af7548105721f05d295edd11e81646778431632a8bfa46659b33f2edb2283aff9a3cafc9ba5fa9b30a61094ba560d112933829dc387c1d48cd5664897469c406b7c12ac80e7e931e873216d8b57ba89a5f43fe2ce6d17be2f7af9ddf1d3260bb37e8dae1ad93b63a5ef1845de0d86707bc2ad994116372ba1eca50d9dc1999aa276b55f839f2c3f2241f6490f26461d7afa9367a1609642f31c0d76799db7f10bb89a924df0b2a35ed9"]}, @nested={0x5c, 0x91, [@generic="0584239dcbd29f2842fd07cbdf4fb6a1f0", @generic="d5de93d0b51d9a95efc104d6ad78b2e67ce296d08d947c58ed101262dc459d6a1a531f83364d47c53fb9176cc968bccf54ee107ec1be9a4368e0b9eee22b360a", @typed={0x4, 0x66}]}]}, 0x11e8}, {&(0x7f00000045c0)={0x14, 0x1d, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x78}]}, 0x14}, {&(0x7f0000004600)={0x78, 0x10, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x68, 0x7b, @binary="329339c5fcac2960e64fe40c3cbdd8d1cf7f7572937e28bf01956646f59b509795eb40cf4c91c329137a06e3403c2d434937c3bd55c2666c598f4229f118b8cd42323833bb37326f48c5a2abc5a8d246f21b47ce8b21ee08bf30939bd77add7e1b"}]}, 0x78}], 0x7, &(0x7f0000005000)=[@rights={{0x18, 0x1, 0x1, [r25, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r26, r28}}}, @cred={{0x1c, 0x1, 0x2, {r5, r34, r36}}}, @rights={{0x2c, 0x1, 0x1, [r37, r50, r51, r52, r53, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r46, r47, r49}}}], 0xa8, 0x4000}, 0x800) [ 1116.651771] input: syz1 as /devices/virtual/input/input2023 [ 1116.756491] input: syz1 as /devices/virtual/input/input2024 [ 1116.771364] input: syz1 as /devices/virtual/input/input2025 [ 1116.864784] input: syz1 as /devices/virtual/input/input2026 [ 1116.944535] input: syz1 as /devices/virtual/input/input2027 23:25:54 executing program 5: pipe(&(0x7f0000000100)) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r10, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000600)) r13 = syz_open_pts(r12, 0x0) read(r13, &(0x7f0000000080)=""/11, 0xb) fstat(r13, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r11, r14}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r16 = socket$inet6(0xa, 0x2, 0x0) r17 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r17, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r19, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r19, 0x40045431, &(0x7f0000000600)) r20 = syz_open_pts(r19, 0x0) read(r20, &(0x7f0000000080)=""/11, 0xb) fstat(r20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r18, r21}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r23 = socket$nl_route(0x10, 0x3, 0x0) splice(r22, 0x0, r23, 0x0, 0x1420000a77, 0x0) r24 = accept4$inet6(r22, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) r25 = memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)=0x0) r27 = eventfd2(0x0, 0x0) fstat(r27, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r28) r29 = socket$inet6(0xa, 0x2, 0x0) r30 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r30, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r30, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r32, 0x40045431, &(0x7f0000000600)) r33 = syz_open_pts(r32, 0x0) read(r33, &(0x7f0000000080)=""/11, 0xb) fstat(r33, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r31, r34}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r35 = eventfd2(0x0, 0x0) fstat(r35, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r36) r37 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r37, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r37, 0xc0502100, &(0x7f0000004780)) r38 = socket$inet6(0xa, 0x2, 0x0) r39 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r39, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r41 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r41, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r41, 0x40045431, &(0x7f0000000600)) r42 = syz_open_pts(r41, 0x0) read(r42, &(0x7f0000000080)=""/11, 0xb) fstat(r42, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r38, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r40, r43}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r44 = eventfd2(0x0, 0x0) fstat(r44, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r45) getgroups(0x1, &(0x7f0000004800)=[r45]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r48 = eventfd2(0x0, 0x0) fstat(r48, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r49) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3, 0x0, 0xffffffffffffffff}) r51 = dup(0xffffffffffffffff) r52 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r52, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r52, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r52, 0x5502) r53 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r54 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r54, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r54, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r54, 0x5502) r55 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r55, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r55, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r55, 0x5502) sendmsg$netlink(r6, &(0x7f0000004a80)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000004680)=[{&(0x7f00000002c0)={0x26c, 0x11, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="473aabff3e99db632852718209b79ef0905e76fbc0ba14d86afb35fe3b0168534a86f240d0f67abab12db29cf72b2477649237cb576962d67f853e67bdf94da49181bfa48a9bedaec6c720656897", @typed={0x8, 0x32, @fd=r8}, @typed={0x8, 0x4e, @uid=r14}, @nested={0x4, 0x82}, @generic="45334636336492840a0fd4c3e81fe9845b1d891baafaa2decc3f97730f23109bd7ba233f5102063bfd3edac570", @typed={0x14, 0x27, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="9d52a1d1048905fc0de05627b9fd33d0198f2f0a9f83089f1939", @typed={0x18, 0x49, @str='system,procselinux\x00'}, @generic="72c6c67bc72d4f75b376a2e0ee8a6623f5c336d8f3e02138bb890846016fd1b9ea49aaba6e080ee0dc6aa835d6bad05a50cb5da9f6728c469b41f3a1937f75848254e6ae0948134688280e2d240b0014742a9f4cd6be4165d05b17348e1625f111f87dceabbad9a1407672025c7895d7768ba52205bb284308b1a1f9fdc4a1d1a86b851d72d8638139bf230246848d8cdfcb0335a838e6b37dff4ac49c5c620086e3c9140c56d0b47480179f8da3e842c4d309e075013f4083e14cc0a525671befce5aa744", @nested={0xc0, 0x27, [@generic="359f40bc0e869ee297058e8771612924ff332744ddfda6a87838297e16ed3caacfa3581a5ad6598192b3697bf6c02bfd902b695204705a02358921084dd9478b9cbcb68d90e371d6d697550e8843e58001e42875c57bbff8e936d672a452f8a030bd7073db23214b726942bf698047ae7e06b7101e1a9fcd81b4509039a692e1b6a91aa97cc9b259e1470bdf3f53c1f9d56743d70e922ebbf95a5f313448057be2fbea7cc49bbbf1eee6fc8a13446190", @typed={0xc, 0x80, @u64=0x11d9}]}]}, 0x26c}, {&(0x7f0000004b00)={0x230, 0x33, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x170, 0x36, [@generic="8e204ea08e529770ef9946bde1fcde60b67072fa991ecb10e24ce4639b9d38cbf22ba2e1840c56260629b3e415dd3cc2eb04e63434d4f71063c78201c60154d378b8cc09ea6716683d6b71313bb6f2bb7dfdfb283b6bf0d91d3cfe9ee7ac6f2d76b173da35c76d38c42e078b74283826121249e28de13b502fc3af90117965e012275a98b96989a304e1d5a9fb07bdc035d1a14b9760af0c4f6a55beb5bd97df56ac6d585c7dd6691f2f40543ad0d27102", @typed={0xc, 0x3c, @u64=0xd67f}, @generic="355003f85ca0056326c4a1cce56410be3a8e70873941399636d06ce3387afff37c9fb26480e1bcf9e62d0969b09c02a35680626d88b21027f01aac63f4b887922f5d34defa44407808cab3068904abf4c3940dbfb3f84be8b7dfc080315edcf8180bf72e921b0b0865e222c557d2f6a6162d443dd98429fda9b13a9ec272e8af48412ac8c4d74799a154a53c163c8bd5ea5f6856a8c04dbdf1e0db5ad66dcb56d080742935c94f8d116128d3766861"]}, @nested={0x4, 0x51}, @nested={0x6c, 0x94, [@typed={0x8, 0x50, @u32=0x4}, @generic="62685c6582b38161ce317701b3b37da96d8b47d6c5e4b99d370a15120b664d900516eb8fde5ab5e8b518dcfa3f0ce0cfc2046dd86d6d83e2bfc26da6c4df1c7eec78cd69840a4c2d128ec5f19e8ea1d80fba4a8660a68aca5bb59c9749"]}, @typed={0x8, 0x27, @pid=r15}, @typed={0x8, 0x68, @ipv4=@remote}, @generic="5f0555c74beb9543f2be86b3b7568e88d42494b82b3f2b736269454fc27dd41406cf7e4a9e5adda04a425026f2e9"]}, 0x230}, {&(0x7f00000007c0)={0x10, 0x33, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000003000)={0x390, 0x28, 0x0, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x4, @ipv6=@rand_addr="129863d8cb8c1ac5f4a68059c16a5c2b"}, @typed={0x8, 0x4, @uid=r21}, @typed={0xc, 0x26, @u64=0xd5d}, @nested={0xc8, 0xa, [@generic, @typed={0x8, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="d4b5829e92cdfead81a6823c7367b632995fa9079f5484d2ed6007c3fedaaf79b9f922bf364d31087e2181746e456beeeb3167c2ab777fb3582468ff400569f6f57acaf9bb9f7355621dedacaa33deb55cae4837df163aaea95c5c70dec6b9ee14de6cc22fe79a0c0653cfb151c177fdfd204fd38c51de1dcc42e51b8b81e7ca59ea5f4dea2b07ed647a4d5d08809068667e15f839f0ab40ef7c", @generic="c95eae751f2c9a8f48de6c93fc7ce95020c9ebe12b6c1e7dae7ebe39575605"]}, @nested={0x190, 0x3e, [@generic="3bcc3aa15ae22e041b666b42e812a0c2a548f5c74a127add9e2b45b7dec60337dfd5c0b0ab18c9349d1876ab0ad487140c50ba02dac49bd5fda96d965902d0369681538064d4da771c7620f440863e618f26c7efbe3f95587d103e2dc7611632eba9c36410370274618f20117a2e3a0cf52bfc541852607521f87c686d27695b7dd7817cacc154731d03937f2964accab14d805c5c33917830f5757c551da9db564aac2844339533bf6130ed1e1bb2de046ff1b3a432b2b0297cd687d26c0c70815c08e75781050d7f045ee4f012022b46b2ac4045c826bc966be3f2ff4b8cd730", @typed={0x8, 0x7a, @fd=r24}, @typed={0x8, 0x1, @u32}, @typed={0x8, 0x0, @u32=0xaf3}, @generic="8fc4e7ff005b41666b83e456bbe76e82438d9b158b2da397e9df9b1a123880271dafc0453ff0bcbed08ed410393a60d34f7214c3d01f9c0cc6a999111800843871b0cd0ba52e9255fb5a20b524a9e60aa5f4561458a69723adc2f336155bf93b3ba42c85fcc94d8b558caa9587aca94b9237dff3321e2657526f13114fa91ce205df924f09cb9a9540f2f808ed3aa9a56d93"]}, @typed={0x100, 0x5e, @binary="a5a1ed26725a833b391266df8bc41a0e99cc5c945eb4093d0778d095a5e593d5fc9e756af7916fae24261ac2395d3ba5c33dfd02a9f72a785da9b14f63a7a39ec4b973722e0d4f9b30fd66928c79f2b5ce26d918235df1c8ed5d384b0375d6f4e3ea16f988747777109e54c055f3766568daf9e37161420749b902e5942ba339b1c8b159efd21240ced44c2ab1a7311a4940edc6d67153baf9755df2d307d86135e62ec7a95feec8647ebce5170ccb30ad7a7db895c995547fc3804ae93b9936abe2ae4285b6f5349006b8e65d6cfdd2b96ec7b188ba1cfd42966bbad7a57d33e8e29715e3afe6d349c00e9c2b2729d0ca1e53d64ae9159e3d"}]}, 0x390}, {&(0x7f00000033c0)={0x11e8, 0x3f, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x117c, 0x36, [@generic="80bfa7ea412d0e0ac84604b75dda385b68a95d8a09a17a630095404986873819bdc1c0660d592261e94330ecb7d53a2903e932745c3484a5208bd8bd48045447d9b5673ce0008a695edda47df495d532ee17141bf67901d33480c5cf0f2db5cb093941036c0090515af4915023b211f204eafe3b34f3d4b21d8b81436f10316b744cb6436ac72172b7381d1faea3878b87da54007366c3264ef2dc9cd3b3e9bc0cc33d3f65b89624d7baea4764a0a42207b8ee6f495710e499cc7ae554006fa47efad71d87f6c7abd8bc132440ca10dfdd063855abd8b4ce82e0106aa7ae4428ae083bcf20e2ef18a7f438b938c0c2b714da543faff8cd69b41281cf612f5b66eb7aa0433814e58f12bafed3317c31cbb6cc51dec935602d301f9873cb6f2ae2784aae3c1c58ab46fd95d532428f7573c3622f5421e20a148a36ff9b0da28034cfa5d658e6b7b7c0df32f2b8490c1f63e0a511fc9b9409c771d6ad3922da28aa2f8c8d7f1387e8aff75b9a88086d685a8e473643ac642b08ae04a5e0b4cb56b0b7be5e7069414270e21af213d0e902e63a9b26cf66c7b8ea5f14706922247a7b6f72f14e88e8dd3b36ec479df2c7294f24e6bc20b0c7fa9d6e90bdcfdb9044ded4d069485f1c6950b26e19a496fc318aedbee79df3f94a81a44e1a05f748a27214c43500ff0ac77d33019cf581b47974d62885f464e97843976b7482a27459f962f68896c466ee01f9bbcb682cce2c2e20594152cbf330e3d1a825b9abd6f965b3996367c2791b3477f12e359ff398faac979e8586056e4a835caee1d150bd46210dbb13c8e4fff9e897a4f8e21894be996eb16541ac7ce66926b9d86268199f228890532aaa9ed20e758e0a145b3690548c1696218eeae94538a421104186261c4fad439dcec5154cdff15cb5eef55a99e932baa5eee763fcbad83a172530db9ba1d806d0f03117c7049265fff8566893838ee8c78abb12bbfcbc56caa792338866e9282141185592ffe1e182ec8249c8d20b9e3c34ce87db33b188b5c867a6d6a4015165156b01bac26dc8a97fd32a4c69c4a966c231156f0f9e70a86b7185371367ebacfa0e4ffe81b2d823479761b25166d2edd44a87cd74a01f689c73ab28f777c948939e09a0e5cd6684bbb6d76cecee0e4077479e14875bd6e3e41b4603e766be67761e163ebc16e7a19408d120754c6a0c954db40b6a6706283e7f80383ab2e97a273b8fa068faeb549433d06b74665a888bd7cff1a6e959793f3daedb02c933efccd5e87f1a6be7b086b449884ba3cf26a7e3504b4c7afeff3522c4ff6f4119725daec795ee72224737891181ad9e749bd9b8a2ee753eb43f27a285f52002a16fb03ab36d5585c5c43301217abeaa968c4c4ac65938df95acd99c3907264375df7ea5b1a1ce478272b7aea141fd7468191dffcb162b2b90ec23fb439c3eb74d9143fe6801b6ad9038d2ba966cf43418b2a6987ce0bb518d6868256b311c9ac6ee5725fcf5e719371c992661690f956bc292154258baeac5ae262dca9ba1eced1907f47ba0b17cdd8a5d59f16f89dccba8e0bab581b23fb85cfb8d6bc8a90c10d0fa96476fd6d293d5556c9fda798c7ddcaa0a0d38c621a5c14ef9e769cedb29d3a4bf4ec120db894d1239ea4679884f395e1658452dfc3c376dccd557435f6bb326a0cce7ef445d1794f3bc32b1d583c6ef4317ed4fc7d48a61d6ab991101c91e39abc6187c7f521076b8f7110cb723305a997fec127795064b591d7027024865526196a54a959584a23335233ae1e963c7e1a16c7a085fa8a2924a43190344584a34c7cfa8902a88438c8ec62b267ed74d56b964be0d7737ca0543fc551c5659cafb2b7bc29dd479ebb1ee3e3dbad6fabddf0130a76fceff833ffd066a61fa802d94cf04c682944482517a33604b53b04a1d648b3e222548fbe39105d77488c6b72fb836338b6300f35d40bd2f7cf9e51a8164bb10f63b2f480094965142d5117ab4abf2052da561782565d357dd1ba01b42d4d61df6bf6e68593cd1ac38f0c6577455155b159dd0403fec4ba3ad6b0001daab374ff66d9b96152cf6e49a4faa017ee47fe73a1c69bd31421f006b8954f6099d6d02d6f9914d2494fada3fa6f00543189a57f9281bba95e26914f729ef48a2ace2204995cba76633a565535446118e7790de9c509631b313f7e28d9e1d10ed233c0d5dd0522bc881afc9cd962f1101c30ee983d2ab39eb7f01a7eca9a2a39055645b584aad1625b81482b29a559f6e81cf782ae185ad2481fa7ad27a1880f9aafa30566fb83fc5eeb9eaaddd97aeb21f1a38cf5af702914f853aef262f5f33107488c1f3cb255e8e5c57f56b510a17774bd44712d556aa69a42cbd056826bd0d65ddcadbcc8e42c107c045f6239496e28553fa801cc75ac8c6ae78e1d0800cf608551471995eab079657b37e6597484a820ae2cbc20735efa6826277fab50fb7aba18cfc6a62a49a11fa2a3f2e1345cbbe498c230bcb376a0d822a7904065e884696933196e790ec25c87fab4f90148a9c277e612abe6399e47be81a438a297cc658b326b16ddd4d25f9abacd8c9d7059fbc606d460b22da8d66edfdf0c891edd6867f891d04575ca704ef51fb043a36a0f9f1dcece14b48f3f66b15613741dafbd8d7d28417f8689afebe2bc54d48c8528b5adfb244ce8c19e069842aed6717dd28af0725fd468ea5a29149f02b8aafd2115c3adf7d139dcc162eef28300c481ebba246951554b0d406273d33fcf5c1d3e8710f5e1d0975215213f64040f92121a878427cff58609f3a363e980039432993b81464f69e683713519998e7fc035a78451214c29ccc40e95873f1af6001bdd946ed7490c878f1ee15ca5a70e71be8b408fa8c640809174672f1d0795b73e45c346471d5d4dc90d33480ac2a3c4bd9929519f73feb5a7e7eca931bc26fa96301741de4e2affc4e908200a2e267440876b5f2bb6b9f1cb5cd0ddd0234e12b44cfae9a44b2e6c0709f2dde9a9db11d57e98fbc845314f1ad474ab227f0aed2b998286e04382bef4a289cdc3cb27084d6b05bad0b7bc57d55e67798962cb1760060fa5a41107d4835914b33ed8180ee0b2a5c0a500436281f7eb1838f96b1dcc0489d28f4ba964e2aa7803fbe2ca6f0f12a57294e230cc360ce2faaa4f3601459f10370450d4fdd9a8f60669dcc10aecceb878439c385fabf2c7ea3a4b05e48d8a28a1a69be2b41f9fdeec09aaebcc6de88b4127cb651cf3836e5385ff0536d6ee23525c1e62dceb790274372dd6f63c9f8cdcdc21cdd6b3444519918f475be55bc5e57212d2e91dde0f5c5482a791b4af0fddf7f897cc0f778cfb114e8ad258d9499c1bef3d6ad9fe04612e461bc28c1d8014581d49f0c89f04a7d6fae274d45d54ab97be7ecf86c96618d3c506c752a6dbed9dbe18650e9f6d475a613b81041371da2b82e5553e442e46760271987fd80ea175f986d254c24e3473828b820e8fc0748eb9c4c291e8b9413bad171acb4981b213fec22314ce9d2468d07f5f97b4c090a6e1daf25a4c9535a980c0a3d3c08f8286e8b9cf4802bd85091287ce3c0292566014d615111ee1ca6d3b0f87c037be8202fbd6e0047203b21bc8f708fae50971330862c72224c2d267958117516e724b1251a47cd08eecec043ab2199f7810d32c46185147e85ddea8115f8cf379bce7219befa6f7a3554e775a92c37f491de716f47016daf0d432a21fc0395da968e2626c7fcedf312d1178b3fd5a084f53c721b56b12fdfbd71f6a7acfa01e0daef42f966416a7737297d50acfad0769f8aa3bc8addd4e16bf677570e57c086f62ad80d574b0a21f220e79b42525e57ac1a2eca4559ddc47a037de5e9450f0a77b88b9bff8efa70693dbb0369a32a44dd061f5a6bdc6d59e9c60ef8fd8ccba9d6f91585349b050c1b61ea8649830b9e37633a39ebd3d186cb5fc6d21217870d1c33766a377581d0c371ab3d858cb9c5a1a3dddbc60c99a7c860fa4d637f61b9067ae6363c498d4151f6d219d96c6a6619576abf74f8e15c69556c8c5459ed847e0646f64a5c4541fc28819bdf5dd071c1b5383045fff36d68f5ee96316f0bbfa9a35a28c1173aa49445a21a756972780fbc500d5395b47d1b5543f4faa39e9951c3ff8ff8c1e573315789ea1c6a50bd3e31107027f71e4b6dfd72a8c9c744c0737e0a2c384bd54db11c0b5f0434e55420b7e8cbe304eaeb68040448586a143659f19c036952e3cd0ef8732c0d378be55531337288f8fb91d2f77a0c70dece9803b7e100e0bbc5632e5e6d22b00ecd03c779b243db887f47f183c211a0d1818b884fc2d3a61020f6691398ee8a32ff8414641e13b760930c64d62c7cae314151e0c3e3cafdf759837a0eed01425cfaaec310e803e662ed5695ac8fde2417a9735f42c6f55c68780d35bae69508371916aae50793579b6d335da3fc31935b614c5ae1e5f59f454614a989b17e06c11e5c56bcd4e155343986d1babffb2beb7f5a9cc1e16a54219ea34cdb98ef15949b20a6848760140d406b501cd89fe3eca1eb8cb04bce6b977154a055721cd400bbd59ee5ee512da6fae290db3e07639a0e7ce347ddb0c8d1f8fcbc7f8f441ef9ee0973cb0cf2b49932a13f059f1f270e1766d4972a99b4f27032bb4f47260640546d22a7736cdeb49c315aa5b67b797095c32da086098fe6a97168d81e0464ff292ea6b719082c84d59bf9e7f88134993c773c9f001ea1b2d1fd4a20d99520d9761f57ff1d4ea76b5142498906eb8d0e06d1a7d9961d9eeb6f08b87f33d8622fb6e0d6997bb1c92def436dfc8cf8ac90453649214f3f09d86b31a408e081be4c2102ef38bcab0138ec0f74a3d715fe687b25d63df2102ae3758b7da3d49968955299b207815562367d08f8b968ed4902181926ed7ad1bc594e3c93d1b7b7fcb45e63a1c4e090ce5f04d9498feba48cdfc06579f90eaf69684b8e2833f5b470d5121e38335431457d4f145100738ae7bc9240cd725b05b4990c63f8c9f0bc8977cb5597e5085191d33ede302df711ee4b01c8ec2dd3acb7b3024d4e6505bab05fc5b67b166b6a0e7ad111756c21776f7836821f42ba835a1052e4936c1405b8c07f91a8701288179c43a3f4c42c4a73ee727ad639fffd096cce7fa1b6abb7f95a11cd4a591d71a51e33608b7b90d3aae4bb3f2f996d22c2ea24585706ea172bab14599b6834079f9de5d007d0858fb3009e01c6d202baa35abc671d62a51971f8163f36bf40d973183a0a380c82f8b11108b2db78fcddbeda43b3c2df4e71246219c2fe2d81d16d2a8cabe090034b135e00b94587b97fd51573ae63fb0df265aa3b17214dda64e3a3ee1d49e72e20a0f02fafe01a9ea852e4219bf0eaef891e82dc38c455d36f13f4055d7fd168d3a92b635705e3b373e90227df33a249cb12aa219faeda7e0152b19592298d6c6855bfdca8fd59c6343b07768e9005b03f705d82a94e2c356f1c8cb191e9338c3b14d0265329d209c67b88cffef23ceb328ac85b95214aa5ddb2a69e2825573225288f1e3f6dd163ac574e8f9b39aa80f5d3d31261f649a19aa697851e404f871fb1682351f99b87d6ba719a2ff0e166a5692a1ff500e320a925f49d06f0244d332777cabe18ccdcdfc4e221f28a6be5e52867f2df4c5729c60bad1eb1af4fd8fa02699963e44e6c8aaad95b31b4c011c2983461eff10233bab8c224e8523a100c5be0cf1254145e0547592e6bc11d8197b6f28ae1b6616f00ded0ed1a5558d7388c379c03253e278fc96231", @generic="896587088f051be67381d2eedc706e1f46d5abd20f9a99bd89e8699d40bdc51e42dd3e68dd14dc518b0cb28a1bc88e048f98fc029e501c", @typed={0x4, 0x90}, @generic="32249a99ba67ff2cea4dd97d8c9047c2f5f65d91b4f4ed8e2b12e284ed459a55d93b7226296005075b22ef6e095532a4b1ccfcaaf87c198b", @generic="df30f9cbc10b249f72fe158ff31c2bd994dba4f62f00e12a16f4743ebc9cdc478e39451518353e81fdf842ad6d1b3f8fc9e4a62178b979ecb02f0675b79a6604", @generic="34cc18560c278faa62023a50c4c3363627c2f4bdd6157429424af7548105721f05d295edd11e81646778431632a8bfa46659b33f2edb2283aff9a3cafc9ba5fa9b30a61094ba560d112933829dc387c1d48cd5664897469c406b7c12ac80e7e931e873216d8b57ba89a5f43fe2ce6d17be2f7af9ddf1d3260bb37e8dae1ad93b63a5ef1845de0d86707bc2ad994116372ba1eca50d9dc1999aa276b55f839f2c3f2241f6490f26461d7afa9367a1609642f31c0d76799db7f10bb89a924df0b2a35ed9"]}, @nested={0x5c, 0x91, [@generic="0584239dcbd29f2842fd07cbdf4fb6a1f0", @generic="d5de93d0b51d9a95efc104d6ad78b2e67ce296d08d947c58ed101262dc459d6a1a531f83364d47c53fb9176cc968bccf54ee107ec1be9a4368e0b9eee22b360a", @typed={0x4, 0x66}]}]}, 0x11e8}, {&(0x7f00000045c0)={0x14, 0x1d, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x78}]}, 0x14}, {&(0x7f0000004600)={0x78, 0x10, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x68, 0x7b, @binary="329339c5fcac2960e64fe40c3cbdd8d1cf7f7572937e28bf01956646f59b509795eb40cf4c91c329137a06e3403c2d434937c3bd55c2666c598f4229f118b8cd42323833bb37326f48c5a2abc5a8d246f21b47ce8b21ee08bf30939bd77add7e1b"}]}, 0x78}], 0x7, &(0x7f0000005000)=[@rights={{0x18, 0x1, 0x1, [r25, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r26, r28}}}, @cred={{0x1c, 0x1, 0x2, {r5, r34, r36}}}, @rights={{0x2c, 0x1, 0x1, [r37, r50, r51, r52, r53, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r46, r47, r49}}}], 0xa8, 0x4000}, 0x800) [ 1117.050644] input: syz1 as /devices/virtual/input/input2028 23:25:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1117.111149] input: syz1 as /devices/virtual/input/input2029 23:25:55 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:55 executing program 1: r0 = socket(0x2, 0x1000000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000300), &(0x7f00000003c0)=0x68) 23:25:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r10, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000600)) r13 = syz_open_pts(r12, 0x0) read(r13, &(0x7f0000000080)=""/11, 0xb) fstat(r13, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r11, r14}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r16 = socket$inet6(0xa, 0x2, 0x0) r17 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r17, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r19, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r19, 0x40045431, &(0x7f0000000600)) r20 = syz_open_pts(r19, 0x0) read(r20, &(0x7f0000000080)=""/11, 0xb) fstat(r20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r18, r21}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r23 = socket$nl_route(0x10, 0x3, 0x0) splice(r22, 0x0, r23, 0x0, 0x1420000a77, 0x0) r24 = accept4$inet6(r22, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) r25 = memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)=0x0) r27 = eventfd2(0x0, 0x0) fstat(r27, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r28) r29 = socket$inet6(0xa, 0x2, 0x0) r30 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r30, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r30, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r32, 0x40045431, &(0x7f0000000600)) r33 = syz_open_pts(r32, 0x0) read(r33, &(0x7f0000000080)=""/11, 0xb) fstat(r33, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r31, r34}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r35 = eventfd2(0x0, 0x0) fstat(r35, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r36) r37 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r37, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r37, 0xc0502100, &(0x7f0000004780)) r38 = socket$inet6(0xa, 0x2, 0x0) r39 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r39, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r41 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r41, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r41, 0x40045431, &(0x7f0000000600)) r42 = syz_open_pts(r41, 0x0) read(r42, &(0x7f0000000080)=""/11, 0xb) fstat(r42, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r38, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r40, r43}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r44 = eventfd2(0x0, 0x0) fstat(r44, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r45) getgroups(0x1, &(0x7f0000004800)=[r45]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r48 = eventfd2(0x0, 0x0) fstat(r48, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r49) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3, 0x0, 0xffffffffffffffff}) r51 = dup(0xffffffffffffffff) r52 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r52, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r52, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r52, 0x5502) r53 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r54 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r54, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r54, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r54, 0x5502) r55 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r55, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r55, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r55, 0x5502) sendmsg$netlink(r6, &(0x7f0000004a80)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000004680)=[{&(0x7f00000002c0)={0x26c, 0x11, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="473aabff3e99db632852718209b79ef0905e76fbc0ba14d86afb35fe3b0168534a86f240d0f67abab12db29cf72b2477649237cb576962d67f853e67bdf94da49181bfa48a9bedaec6c720656897", @typed={0x8, 0x32, @fd=r8}, @typed={0x8, 0x4e, @uid=r14}, @nested={0x4, 0x82}, @generic="45334636336492840a0fd4c3e81fe9845b1d891baafaa2decc3f97730f23109bd7ba233f5102063bfd3edac570", @typed={0x14, 0x27, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="9d52a1d1048905fc0de05627b9fd33d0198f2f0a9f83089f1939", @typed={0x18, 0x49, @str='system,procselinux\x00'}, @generic="72c6c67bc72d4f75b376a2e0ee8a6623f5c336d8f3e02138bb890846016fd1b9ea49aaba6e080ee0dc6aa835d6bad05a50cb5da9f6728c469b41f3a1937f75848254e6ae0948134688280e2d240b0014742a9f4cd6be4165d05b17348e1625f111f87dceabbad9a1407672025c7895d7768ba52205bb284308b1a1f9fdc4a1d1a86b851d72d8638139bf230246848d8cdfcb0335a838e6b37dff4ac49c5c620086e3c9140c56d0b47480179f8da3e842c4d309e075013f4083e14cc0a525671befce5aa744", @nested={0xc0, 0x27, [@generic="359f40bc0e869ee297058e8771612924ff332744ddfda6a87838297e16ed3caacfa3581a5ad6598192b3697bf6c02bfd902b695204705a02358921084dd9478b9cbcb68d90e371d6d697550e8843e58001e42875c57bbff8e936d672a452f8a030bd7073db23214b726942bf698047ae7e06b7101e1a9fcd81b4509039a692e1b6a91aa97cc9b259e1470bdf3f53c1f9d56743d70e922ebbf95a5f313448057be2fbea7cc49bbbf1eee6fc8a13446190", @typed={0xc, 0x80, @u64=0x11d9}]}]}, 0x26c}, {&(0x7f0000004b00)={0x230, 0x33, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x170, 0x36, [@generic="8e204ea08e529770ef9946bde1fcde60b67072fa991ecb10e24ce4639b9d38cbf22ba2e1840c56260629b3e415dd3cc2eb04e63434d4f71063c78201c60154d378b8cc09ea6716683d6b71313bb6f2bb7dfdfb283b6bf0d91d3cfe9ee7ac6f2d76b173da35c76d38c42e078b74283826121249e28de13b502fc3af90117965e012275a98b96989a304e1d5a9fb07bdc035d1a14b9760af0c4f6a55beb5bd97df56ac6d585c7dd6691f2f40543ad0d27102", @typed={0xc, 0x3c, @u64=0xd67f}, @generic="355003f85ca0056326c4a1cce56410be3a8e70873941399636d06ce3387afff37c9fb26480e1bcf9e62d0969b09c02a35680626d88b21027f01aac63f4b887922f5d34defa44407808cab3068904abf4c3940dbfb3f84be8b7dfc080315edcf8180bf72e921b0b0865e222c557d2f6a6162d443dd98429fda9b13a9ec272e8af48412ac8c4d74799a154a53c163c8bd5ea5f6856a8c04dbdf1e0db5ad66dcb56d080742935c94f8d116128d3766861"]}, @nested={0x4, 0x51}, @nested={0x6c, 0x94, [@typed={0x8, 0x50, @u32=0x4}, @generic="62685c6582b38161ce317701b3b37da96d8b47d6c5e4b99d370a15120b664d900516eb8fde5ab5e8b518dcfa3f0ce0cfc2046dd86d6d83e2bfc26da6c4df1c7eec78cd69840a4c2d128ec5f19e8ea1d80fba4a8660a68aca5bb59c9749"]}, @typed={0x8, 0x27, @pid=r15}, @typed={0x8, 0x68, @ipv4=@remote}, @generic="5f0555c74beb9543f2be86b3b7568e88d42494b82b3f2b736269454fc27dd41406cf7e4a9e5adda04a425026f2e9"]}, 0x230}, {&(0x7f00000007c0)={0x10, 0x33, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000003000)={0x390, 0x28, 0x0, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x4, @ipv6=@rand_addr="129863d8cb8c1ac5f4a68059c16a5c2b"}, @typed={0x8, 0x4, @uid=r21}, @typed={0xc, 0x26, @u64=0xd5d}, @nested={0xc8, 0xa, [@generic, @typed={0x8, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="d4b5829e92cdfead81a6823c7367b632995fa9079f5484d2ed6007c3fedaaf79b9f922bf364d31087e2181746e456beeeb3167c2ab777fb3582468ff400569f6f57acaf9bb9f7355621dedacaa33deb55cae4837df163aaea95c5c70dec6b9ee14de6cc22fe79a0c0653cfb151c177fdfd204fd38c51de1dcc42e51b8b81e7ca59ea5f4dea2b07ed647a4d5d08809068667e15f839f0ab40ef7c", @generic="c95eae751f2c9a8f48de6c93fc7ce95020c9ebe12b6c1e7dae7ebe39575605"]}, @nested={0x190, 0x3e, [@generic="3bcc3aa15ae22e041b666b42e812a0c2a548f5c74a127add9e2b45b7dec60337dfd5c0b0ab18c9349d1876ab0ad487140c50ba02dac49bd5fda96d965902d0369681538064d4da771c7620f440863e618f26c7efbe3f95587d103e2dc7611632eba9c36410370274618f20117a2e3a0cf52bfc541852607521f87c686d27695b7dd7817cacc154731d03937f2964accab14d805c5c33917830f5757c551da9db564aac2844339533bf6130ed1e1bb2de046ff1b3a432b2b0297cd687d26c0c70815c08e75781050d7f045ee4f012022b46b2ac4045c826bc966be3f2ff4b8cd730", @typed={0x8, 0x7a, @fd=r24}, @typed={0x8, 0x1, @u32}, @typed={0x8, 0x0, @u32=0xaf3}, @generic="8fc4e7ff005b41666b83e456bbe76e82438d9b158b2da397e9df9b1a123880271dafc0453ff0bcbed08ed410393a60d34f7214c3d01f9c0cc6a999111800843871b0cd0ba52e9255fb5a20b524a9e60aa5f4561458a69723adc2f336155bf93b3ba42c85fcc94d8b558caa9587aca94b9237dff3321e2657526f13114fa91ce205df924f09cb9a9540f2f808ed3aa9a56d93"]}, @typed={0x100, 0x5e, @binary="a5a1ed26725a833b391266df8bc41a0e99cc5c945eb4093d0778d095a5e593d5fc9e756af7916fae24261ac2395d3ba5c33dfd02a9f72a785da9b14f63a7a39ec4b973722e0d4f9b30fd66928c79f2b5ce26d918235df1c8ed5d384b0375d6f4e3ea16f988747777109e54c055f3766568daf9e37161420749b902e5942ba339b1c8b159efd21240ced44c2ab1a7311a4940edc6d67153baf9755df2d307d86135e62ec7a95feec8647ebce5170ccb30ad7a7db895c995547fc3804ae93b9936abe2ae4285b6f5349006b8e65d6cfdd2b96ec7b188ba1cfd42966bbad7a57d33e8e29715e3afe6d349c00e9c2b2729d0ca1e53d64ae9159e3d"}]}, 0x390}, {&(0x7f00000033c0)={0x11e8, 0x3f, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x117c, 0x36, [@generic="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", @generic="896587088f051be67381d2eedc706e1f46d5abd20f9a99bd89e8699d40bdc51e42dd3e68dd14dc518b0cb28a1bc88e048f98fc029e501c", @typed={0x4, 0x90}, @generic="32249a99ba67ff2cea4dd97d8c9047c2f5f65d91b4f4ed8e2b12e284ed459a55d93b7226296005075b22ef6e095532a4b1ccfcaaf87c198b", @generic="df30f9cbc10b249f72fe158ff31c2bd994dba4f62f00e12a16f4743ebc9cdc478e39451518353e81fdf842ad6d1b3f8fc9e4a62178b979ecb02f0675b79a6604", @generic="34cc18560c278faa62023a50c4c3363627c2f4bdd6157429424af7548105721f05d295edd11e81646778431632a8bfa46659b33f2edb2283aff9a3cafc9ba5fa9b30a61094ba560d112933829dc387c1d48cd5664897469c406b7c12ac80e7e931e873216d8b57ba89a5f43fe2ce6d17be2f7af9ddf1d3260bb37e8dae1ad93b63a5ef1845de0d86707bc2ad994116372ba1eca50d9dc1999aa276b55f839f2c3f2241f6490f26461d7afa9367a1609642f31c0d76799db7f10bb89a924df0b2a35ed9"]}, @nested={0x5c, 0x91, [@generic="0584239dcbd29f2842fd07cbdf4fb6a1f0", @generic="d5de93d0b51d9a95efc104d6ad78b2e67ce296d08d947c58ed101262dc459d6a1a531f83364d47c53fb9176cc968bccf54ee107ec1be9a4368e0b9eee22b360a", @typed={0x4, 0x66}]}]}, 0x11e8}, {&(0x7f00000045c0)={0x14, 0x1d, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x78}]}, 0x14}, {&(0x7f0000004600)={0x78, 0x10, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x68, 0x7b, @binary="329339c5fcac2960e64fe40c3cbdd8d1cf7f7572937e28bf01956646f59b509795eb40cf4c91c329137a06e3403c2d434937c3bd55c2666c598f4229f118b8cd42323833bb37326f48c5a2abc5a8d246f21b47ce8b21ee08bf30939bd77add7e1b"}]}, 0x78}], 0x7, &(0x7f0000005000)=[@rights={{0x18, 0x1, 0x1, [r25, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r26, r28}}}, @cred={{0x1c, 0x1, 0x2, {r5, r34, r36}}}, @rights={{0x2c, 0x1, 0x1, [r37, r50, r51, r52, r53, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r46, r47, r49}}}], 0xa8, 0x4000}, 0x800) [ 1117.212740] input: syz1 as /devices/virtual/input/input2030 23:25:55 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:55 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x400260, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="a0", 0x1}], 0x1) 23:25:55 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1117.484111] input: syz1 as /devices/virtual/input/input2031 [ 1117.560297] input: syz1 as /devices/virtual/input/input2032 [ 1117.591281] input: syz1 as /devices/virtual/input/input2033 [ 1117.646883] input: syz1 as /devices/virtual/input/input2034 [ 1117.682478] input: syz1 as /devices/virtual/input/input2035 [ 1117.793994] input: syz1 as /devices/virtual/input/input2036 23:25:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ptrace$cont(0x7, r4, 0xffffffffffffff7b, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1b) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ptrace$cont(0x9dcd1ccb5f3ebac4, r5, 0x50, 0x0) 23:25:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x2, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000480)=0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r3, 0x400454dc, 0x0) r4 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$inet6(0xa, 0x80002, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x9) 23:25:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:57 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') preadv(r1, &(0x7f00000013c0), 0x1e3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000000)='./bus\x00', 0x0) 23:25:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 23:25:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r10, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000600)) r13 = syz_open_pts(r12, 0x0) read(r13, &(0x7f0000000080)=""/11, 0xb) fstat(r13, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r11, r14}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r16 = socket$inet6(0xa, 0x2, 0x0) r17 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r17, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r19, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r19, 0x40045431, &(0x7f0000000600)) r20 = syz_open_pts(r19, 0x0) read(r20, &(0x7f0000000080)=""/11, 0xb) fstat(r20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r18, r21}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r23 = socket$nl_route(0x10, 0x3, 0x0) splice(r22, 0x0, r23, 0x0, 0x1420000a77, 0x0) r24 = accept4$inet6(r22, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) r25 = memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)=0x0) r27 = eventfd2(0x0, 0x0) fstat(r27, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r28) r29 = socket$inet6(0xa, 0x2, 0x0) r30 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r30, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r30, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r32, 0x40045431, &(0x7f0000000600)) r33 = syz_open_pts(r32, 0x0) read(r33, &(0x7f0000000080)=""/11, 0xb) fstat(r33, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r31, r34}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r35 = eventfd2(0x0, 0x0) fstat(r35, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r36) r37 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r37, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r37, 0xc0502100, &(0x7f0000004780)) r38 = socket$inet6(0xa, 0x2, 0x0) r39 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r39, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r41 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r41, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r41, 0x40045431, &(0x7f0000000600)) r42 = syz_open_pts(r41, 0x0) read(r42, &(0x7f0000000080)=""/11, 0xb) fstat(r42, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r38, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r40, r43}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r44 = eventfd2(0x0, 0x0) fstat(r44, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r45) getgroups(0x1, &(0x7f0000004800)=[r45]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r48 = eventfd2(0x0, 0x0) fstat(r48, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r49) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3, 0x0, 0xffffffffffffffff}) r51 = dup(0xffffffffffffffff) r52 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r52, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r52, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r52, 0x5502) r53 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r54 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r54, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r54, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r54, 0x5502) r55 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r55, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r55, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r55, 0x5502) sendmsg$netlink(r6, &(0x7f0000004a80)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000004680)=[{&(0x7f00000002c0)={0x26c, 0x11, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="473aabff3e99db632852718209b79ef0905e76fbc0ba14d86afb35fe3b0168534a86f240d0f67abab12db29cf72b2477649237cb576962d67f853e67bdf94da49181bfa48a9bedaec6c720656897", @typed={0x8, 0x32, @fd=r8}, @typed={0x8, 0x4e, @uid=r14}, @nested={0x4, 0x82}, @generic="45334636336492840a0fd4c3e81fe9845b1d891baafaa2decc3f97730f23109bd7ba233f5102063bfd3edac570", @typed={0x14, 0x27, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="9d52a1d1048905fc0de05627b9fd33d0198f2f0a9f83089f1939", @typed={0x18, 0x49, @str='system,procselinux\x00'}, @generic="72c6c67bc72d4f75b376a2e0ee8a6623f5c336d8f3e02138bb890846016fd1b9ea49aaba6e080ee0dc6aa835d6bad05a50cb5da9f6728c469b41f3a1937f75848254e6ae0948134688280e2d240b0014742a9f4cd6be4165d05b17348e1625f111f87dceabbad9a1407672025c7895d7768ba52205bb284308b1a1f9fdc4a1d1a86b851d72d8638139bf230246848d8cdfcb0335a838e6b37dff4ac49c5c620086e3c9140c56d0b47480179f8da3e842c4d309e075013f4083e14cc0a525671befce5aa744", @nested={0xc0, 0x27, [@generic="359f40bc0e869ee297058e8771612924ff332744ddfda6a87838297e16ed3caacfa3581a5ad6598192b3697bf6c02bfd902b695204705a02358921084dd9478b9cbcb68d90e371d6d697550e8843e58001e42875c57bbff8e936d672a452f8a030bd7073db23214b726942bf698047ae7e06b7101e1a9fcd81b4509039a692e1b6a91aa97cc9b259e1470bdf3f53c1f9d56743d70e922ebbf95a5f313448057be2fbea7cc49bbbf1eee6fc8a13446190", @typed={0xc, 0x80, @u64=0x11d9}]}]}, 0x26c}, {&(0x7f0000004b00)={0x230, 0x33, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x170, 0x36, [@generic="8e204ea08e529770ef9946bde1fcde60b67072fa991ecb10e24ce4639b9d38cbf22ba2e1840c56260629b3e415dd3cc2eb04e63434d4f71063c78201c60154d378b8cc09ea6716683d6b71313bb6f2bb7dfdfb283b6bf0d91d3cfe9ee7ac6f2d76b173da35c76d38c42e078b74283826121249e28de13b502fc3af90117965e012275a98b96989a304e1d5a9fb07bdc035d1a14b9760af0c4f6a55beb5bd97df56ac6d585c7dd6691f2f40543ad0d27102", @typed={0xc, 0x3c, @u64=0xd67f}, @generic="355003f85ca0056326c4a1cce56410be3a8e70873941399636d06ce3387afff37c9fb26480e1bcf9e62d0969b09c02a35680626d88b21027f01aac63f4b887922f5d34defa44407808cab3068904abf4c3940dbfb3f84be8b7dfc080315edcf8180bf72e921b0b0865e222c557d2f6a6162d443dd98429fda9b13a9ec272e8af48412ac8c4d74799a154a53c163c8bd5ea5f6856a8c04dbdf1e0db5ad66dcb56d080742935c94f8d116128d3766861"]}, @nested={0x4, 0x51}, @nested={0x6c, 0x94, [@typed={0x8, 0x50, @u32=0x4}, @generic="62685c6582b38161ce317701b3b37da96d8b47d6c5e4b99d370a15120b664d900516eb8fde5ab5e8b518dcfa3f0ce0cfc2046dd86d6d83e2bfc26da6c4df1c7eec78cd69840a4c2d128ec5f19e8ea1d80fba4a8660a68aca5bb59c9749"]}, @typed={0x8, 0x27, @pid=r15}, @typed={0x8, 0x68, @ipv4=@remote}, @generic="5f0555c74beb9543f2be86b3b7568e88d42494b82b3f2b736269454fc27dd41406cf7e4a9e5adda04a425026f2e9"]}, 0x230}, {&(0x7f00000007c0)={0x10, 0x33, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000003000)={0x390, 0x28, 0x0, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x4, @ipv6=@rand_addr="129863d8cb8c1ac5f4a68059c16a5c2b"}, @typed={0x8, 0x4, @uid=r21}, @typed={0xc, 0x26, @u64=0xd5d}, @nested={0xc8, 0xa, [@generic, @typed={0x8, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="d4b5829e92cdfead81a6823c7367b632995fa9079f5484d2ed6007c3fedaaf79b9f922bf364d31087e2181746e456beeeb3167c2ab777fb3582468ff400569f6f57acaf9bb9f7355621dedacaa33deb55cae4837df163aaea95c5c70dec6b9ee14de6cc22fe79a0c0653cfb151c177fdfd204fd38c51de1dcc42e51b8b81e7ca59ea5f4dea2b07ed647a4d5d08809068667e15f839f0ab40ef7c", @generic="c95eae751f2c9a8f48de6c93fc7ce95020c9ebe12b6c1e7dae7ebe39575605"]}, @nested={0x190, 0x3e, [@generic="3bcc3aa15ae22e041b666b42e812a0c2a548f5c74a127add9e2b45b7dec60337dfd5c0b0ab18c9349d1876ab0ad487140c50ba02dac49bd5fda96d965902d0369681538064d4da771c7620f440863e618f26c7efbe3f95587d103e2dc7611632eba9c36410370274618f20117a2e3a0cf52bfc541852607521f87c686d27695b7dd7817cacc154731d03937f2964accab14d805c5c33917830f5757c551da9db564aac2844339533bf6130ed1e1bb2de046ff1b3a432b2b0297cd687d26c0c70815c08e75781050d7f045ee4f012022b46b2ac4045c826bc966be3f2ff4b8cd730", @typed={0x8, 0x7a, @fd=r24}, @typed={0x8, 0x1, @u32}, @typed={0x8, 0x0, @u32=0xaf3}, @generic="8fc4e7ff005b41666b83e456bbe76e82438d9b158b2da397e9df9b1a123880271dafc0453ff0bcbed08ed410393a60d34f7214c3d01f9c0cc6a999111800843871b0cd0ba52e9255fb5a20b524a9e60aa5f4561458a69723adc2f336155bf93b3ba42c85fcc94d8b558caa9587aca94b9237dff3321e2657526f13114fa91ce205df924f09cb9a9540f2f808ed3aa9a56d93"]}, @typed={0x100, 0x5e, @binary="a5a1ed26725a833b391266df8bc41a0e99cc5c945eb4093d0778d095a5e593d5fc9e756af7916fae24261ac2395d3ba5c33dfd02a9f72a785da9b14f63a7a39ec4b973722e0d4f9b30fd66928c79f2b5ce26d918235df1c8ed5d384b0375d6f4e3ea16f988747777109e54c055f3766568daf9e37161420749b902e5942ba339b1c8b159efd21240ced44c2ab1a7311a4940edc6d67153baf9755df2d307d86135e62ec7a95feec8647ebce5170ccb30ad7a7db895c995547fc3804ae93b9936abe2ae4285b6f5349006b8e65d6cfdd2b96ec7b188ba1cfd42966bbad7a57d33e8e29715e3afe6d349c00e9c2b2729d0ca1e53d64ae9159e3d"}]}, 0x390}, {&(0x7f00000033c0)={0x11e8, 0x3f, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x117c, 0x36, [@generic="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", @generic="896587088f051be67381d2eedc706e1f46d5abd20f9a99bd89e8699d40bdc51e42dd3e68dd14dc518b0cb28a1bc88e048f98fc029e501c", @typed={0x4, 0x90}, @generic="32249a99ba67ff2cea4dd97d8c9047c2f5f65d91b4f4ed8e2b12e284ed459a55d93b7226296005075b22ef6e095532a4b1ccfcaaf87c198b", @generic="df30f9cbc10b249f72fe158ff31c2bd994dba4f62f00e12a16f4743ebc9cdc478e39451518353e81fdf842ad6d1b3f8fc9e4a62178b979ecb02f0675b79a6604", @generic="34cc18560c278faa62023a50c4c3363627c2f4bdd6157429424af7548105721f05d295edd11e81646778431632a8bfa46659b33f2edb2283aff9a3cafc9ba5fa9b30a61094ba560d112933829dc387c1d48cd5664897469c406b7c12ac80e7e931e873216d8b57ba89a5f43fe2ce6d17be2f7af9ddf1d3260bb37e8dae1ad93b63a5ef1845de0d86707bc2ad994116372ba1eca50d9dc1999aa276b55f839f2c3f2241f6490f26461d7afa9367a1609642f31c0d76799db7f10bb89a924df0b2a35ed9"]}, @nested={0x5c, 0x91, [@generic="0584239dcbd29f2842fd07cbdf4fb6a1f0", @generic="d5de93d0b51d9a95efc104d6ad78b2e67ce296d08d947c58ed101262dc459d6a1a531f83364d47c53fb9176cc968bccf54ee107ec1be9a4368e0b9eee22b360a", @typed={0x4, 0x66}]}]}, 0x11e8}, {&(0x7f00000045c0)={0x14, 0x1d, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x78}]}, 0x14}, {&(0x7f0000004600)={0x78, 0x10, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x68, 0x7b, @binary="329339c5fcac2960e64fe40c3cbdd8d1cf7f7572937e28bf01956646f59b509795eb40cf4c91c329137a06e3403c2d434937c3bd55c2666c598f4229f118b8cd42323833bb37326f48c5a2abc5a8d246f21b47ce8b21ee08bf30939bd77add7e1b"}]}, 0x78}], 0x7, &(0x7f0000005000)=[@rights={{0x18, 0x1, 0x1, [r25, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r26, r28}}}, @cred={{0x1c, 0x1, 0x2, {r5, r34, r36}}}, @rights={{0x2c, 0x1, 0x1, [r37, r50, r51, r52, r53, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r46, r47, r49}}}], 0xa8, 0x4000}, 0x800) 23:25:57 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') preadv(r1, &(0x7f00000013c0), 0x1e3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000000)='./bus\x00', 0x0) 23:25:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:57 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x5dc291) lseek(r0, 0xfffdfffffffffff7, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1119.266889] binder: 2850:2854 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1119.282539] binder: 2850:2854 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1119.290883] binder: 2850:2854 Release 1 refcount change on invalid ref 0 ret -22 23:25:57 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r1, &(0x7f0000000040)="28b9061811c0e3c321a88fda8f2c151bf269e3f1415c9fafe881890ffe6889b8816ce94827e9ee5f4d5cfb152fc97a9945bf2557b2080a58ebb2aae3c5ee139fb18c068d67a260b22cd8716db1c6f1b32006f48f3c0c52634c53", 0x5a, 0x80, 0x0, 0x0) dup2(r0, r1) [ 1119.334536] binder: 2866:2871 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1119.374483] binder: 2866:2871 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1119.431572] binder: 2866:2871 Release 1 refcount change on invalid ref 0 ret -22 23:25:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:25:57 executing program 3: [ 1119.572744] binder: 2891:2894 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1119.602395] binder: 2891:2894 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1119.610532] binder: 2891:2894 Release 1 refcount change on invalid ref 0 ret -22 [ 1119.628641] input: syz1 as /devices/virtual/input/input2037 [ 1119.710832] input: syz1 as /devices/virtual/input/input2038 [ 1119.788852] input: syz1 as /devices/virtual/input/input2039 23:26:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:26:00 executing program 4: 23:26:00 executing program 3: 23:26:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r44, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r44, 0x5502) r45 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r45, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r45, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r45, 0x5502) 23:26:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x2, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000480)=0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r3, 0x400454dc, 0x0) r4 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$inet6(0xa, 0x80002, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x9) 23:26:00 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0xe00000000000000, 0x3) tkill(r3, 0x1b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1f7b4741ed5fc382}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x2, 0x5, 0x8, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0xa}, [@typed={0x8, 0x81, @u32=0x4}, @typed={0xc, 0x9, @u64=0x19a}, @typed={0x8, 0x86, @pid=r3}, @generic]}, 0x30}, 0x1, 0x0, 0x0, 0x1800}, 0x4000000) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:26:00 executing program 3: 23:26:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:26:00 executing program 4: 23:26:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6b5) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) pipe2(&(0x7f0000000700), 0x80000) sendmsg$nl_generic(r3, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x490, 0x2c, 0x8, 0x70bd29, 0x25dfdbfd, {0x7}, [@nested={0xbc, 0x56, [@generic="3ecdb39ff6630406c1c78f77dde1e94031a1166e05d2f99475c0b7aef371f11bcf90747edbdd0656191bdf11e9a699a380988b07b1800536e9ea2b7703ba0c59f28e32c7f08ca3e1a6cb987ed41acd815d332906d45a84cecde5869c1c22e861a9750bd791c3d646bd8ca8d0729cab886111b05a66304a4d0e6886559fdf52", @generic="7b58cd9ba8dab4ad30dd4882d174d30984a0db41d3c77281fe6df385c3c0ff0d45834c7beba700d325aff8947f22", @typed={0x8, 0x7c, @str='\\\x00'}]}, @nested={0x154, 0x90, [@typed={0xa4, 0x55, @binary="eff30d1d0e519e9fbb3343e3a671b4ed0d9b3509bcf9a0cbf9ae24afed5de891db833b2429be36ebdc9b91239949b4480bdc410e2d6ccf86d85e0ef9720a934d11dbb6671c4427082777f62a74e469abaec372178cd06cd4bb43996bf533108f3671ec38cf420455ebda0d8515e723bd289d8fd2577bb410fc6e71b0b54636f93aa3461434b5f8bd0021220c7619a3d4dc471a27e4bc37e0c5d904b4dae32c"}, @typed={0x8, 0x36, @pid=0xffffffffffffffff}, @generic="c3cbc710bb7cf9f0c38ded988c6015cc60e71961db838396cf99f07bed56c7f367824244a933268c98cbdd29494d724ac34996aec6cce396fa1ae2968175fa767dbb", @generic="50d1342a74cc532bf1b263ebbe8e21c74183634462b40ca2ca55b7cb206d22da2b59e350105033675eb91f81f69d93e04aacb6d65e117bfe1d96d36425dd8ab510f0624719ed85fd", @typed={0x14, 0x1a, @ipv6=@dev={0xfe, 0x80, [], 0xf}}, @generic="bf33", @typed={0x4, 0x37}]}, @nested={0x20, 0x71, [@typed={0x1c, 0x86, @str='ppp0@[selinux-vboxnet0\x00'}]}, @typed={0x4, 0x22}, @typed={0x8, 0x86, @str='\x00'}, @typed={0x114, 0x4, @str='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce'}, @nested={0x12c, 0x3f, [@generic="2ac3c801b1fbe6f3fdabcfe6e027bf28055803c8c02c730157b09d1a4eaf165c9c4eec50102a30cf43ae812c869f5524030e9990533b6e9c5533a6a344a732d060a7c709a66ecfa670137dd2a481a7497ffe939942cff71fcbe515d68715276a30f89ee7dfa3d9994d6813d05040ade2069b6c9d9e6705f9a44a5680ae5bdf9b94b50451413ec27007742459d3415baf4e2fe1351f9913d6b2b8971611276ef49a98ded997031110d2a5caa7f25cac67347f73e0f69461481729fb43a9f2f985e387bea8e43e5ac0379c0487b5429888f04aacef", @generic="893b9824db9f34ae2fe3f9bb15b664871ab31abe59f45c371de4279a60da6994a143ace96c96015fac4345f7a3d7a21fae5668b7b82d51cad8f7e8eb6690", @typed={0x14, 0x11, @str='proc\x0e!selinux@\x00'}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x4000}, 0x240008a5) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 23:26:00 executing program 3: 23:26:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:26:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001300)={r1, 0x3, 0x6, @dev}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r0) 23:26:00 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) io_getevents(0x0, 0x0, 0x1, &(0x7f0000000180)=[{}], 0x0) 23:26:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1122.466197] device lo entered promiscuous mode [ 1122.498082] binder: 2935:2937 ioctl c0306201 0 returned -14 [ 1122.546747] device lo left promiscuous mode [ 1122.586283] device lo entered promiscuous mode [ 1122.597652] device lo left promiscuous mode [ 1122.665082] input: syz1 as /devices/virtual/input/input2040 [ 1122.744653] input: syz1 as /devices/virtual/input/input2041 [ 1122.801693] input: syz1 as /devices/virtual/input/input2042 23:26:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r44, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r44, 0x5502) r45 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r45, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r45, 0x5501, 0x0) 23:26:01 executing program 2: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000140)=""/65) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2ad}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:26:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:26:01 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights, @rights], 0x20}, 0x0) r0 = socket(0x18, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0xffffffffffffff7b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 23:26:01 executing program 3: syz_open_procfs$namespace(0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) lsetxattr$smack_xattr_label(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0xfffffffffffffff9) 23:26:01 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) setxattr$smack_xattr_label(0x0, 0x0, 0x0, 0x0, 0x0) 23:26:01 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420000a77, 0x0) getpeername$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) ptrace$cont(0x9, r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x877) 23:26:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:26:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1123.154688] binder: 2956:2960 ioctl c0306201 0 returned -14 23:26:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x70f000, 0x0}) 23:26:01 executing program 4: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x16) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645abbd4a8c3275cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f109dc51008a0e3eba7365951c3e9eddcc5c5b7"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) [ 1123.219915] binder: 2967:2970 ioctl c0306201 0 returned -14 23:26:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0xff40) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xad, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000001cc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/status\x00', 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r9, 0x0, r10, 0x0, 0x1420000a77, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r11, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r11, 0x5502) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001b00)='sched\x00') r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/ptmx\x00', 0x10800, 0x0) r14 = dup(0xffffffffffffffff) io_submit(r3, 0x6, &(0x7f0000001d00)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x8828cba62013c192, 0x9, 0xffffffffffffffff, &(0x7f00000007c0)="452e25a112c8bdddfa85bf7ece677c20a62587f3a4c136bceeb28cc0fee2a55bc5b6bd7bf74d70156a891ae28d7c20520521188fb4a8716dbdd7ed9e36a17579df0568d74281dc96e0b57af7eca1c6f324bc9444fc6f424cb6d3999e562aba702e108584c491ca960c63f8cddb6fe2de459905535d0277234df6368c5749017f1530098f382e181828318c24e3ab28a9a70ca415d4033909db5f293c1b36cec098b55dcd3093f76c45bb3b842bfd64e2f3648d4c60", 0xb5, 0x7aa, 0x0, 0x1, r4}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x36380897e0388e3e, 0x5aa0, r1, &(0x7f00000008c0)="31573a3f8fd0b60f3801322d8aaf2a56c66ffba9a97665076be2b0d7336c74f8f3e9a1a9dd03a6e3d7e40af5a4cb10451e711acb118a301ed267af6c330ec82c5f4cb045e91f2a79fc4721d97b1f6bdc97939ea86618ce2a9314", 0x5a, 0x8, 0x0, 0x1, r6}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f00000009c0)="9b3d794f3fb4499220df576a40e9cf5d6ff01a91b1b9048d1cd914c3728ad478bf89b51b36069968268520d76baae77f4d36d18489e75683eb50f8adfe0f2cb3c86247f908c8612dd1e5a7d5af", 0x4d, 0x6, 0x0, 0x1, r8}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x68c, r0, &(0x7f0000000a80)="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", 0x1000, 0x7, 0x0, 0x1, r9}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x3, 0x4, r11, &(0x7f0000001ac0)="e37557f0f0fd6e2d1826d73b4bcd6b632fe22eda07faa348ad", 0x19, 0xffff, 0x0, 0x1, r12}, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x8, 0x4, r13, &(0x7f0000001bc0)="4943485845968e19c3000a6245bf97e1b3d0e29f0de6750b1cd1d9109a8ffaf3600c405e48e34bbedac3f48af227895fd0f62e22a6d068f0bf4460dfc39810b16089df2aa3efc9560e7e3e2df17556d81728667913c02bdb55da08d6b7d10485ec3ef4d01f9823e2db85237906bd344063d439f9806b7eb8524010eb9e42043b64f990854d3d469cf7a8c1d897371dd02483a73e92552f2f75e8bcb651c0bd7bbbae49c2555446476233e4894f13e93414a9afe9c2cd3aaf5964bbfa3af41ffd0e190934f3af942f19aac0aa54c8a4c4e5fa016a8f47f948dc9c1481292075", 0xdf, 0x1, 0x0, 0x1, r14}]) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540), 0x118) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)=""/105, 0x69}], 0x1}}], 0x1, 0x0, 0x0) r15 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8600, 0x0) sendmmsg$inet6(r15, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="8757200035e6305efca139ef83684f8cd8ccc914db92d787cc0b4e154f6f8b543b400626ba911a4777305625a2c9bbbbf8d421e430b94195c06a866a5c4e2e4385fe927271ec001bac5d2c48a516eb16fd504c9cb0154b62f3f4593fb7370c15fab8c53313cf80f47ce857a514bda3739fa9ee9bbb25e5ab30b1296479a08bbf31431929935e7b8bd53595959eda9c65a639970a43dfe68bbacc6fc76edf72f6773d98877d0cfc6ed3c72b415939247ec23004e7341a7eb714ad4ac2b833f4034159f8cb89fe052f", 0xc8}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x8000, @ipv4={[], [], @rand_addr=0x500000}, 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="4c9431e10c1140f75e94b41c8f5ff7c88b27e8ef97888390777f6df834bf1009fa263a6e7e44e8956228da5b6d89488dcb01227f66ec1ff97f1effdb48fa14c478f6820b9e65c7de70a053921c12c77c971d1784134c2d2247fdfe1b9c624e95caba241051b05a6afd2934bd9a143930ecac95040069f648f733eab3c6fe24e2047269d4927621d64cebd3ae08d82a67cb3a5760477f2d36ff034391c85f20b87a91fbf2cf48588c005f24fd885fd00f895a649f5407f10710deb576e99b90f35ee16083435c71196c42ae3a47302b368611728d9d1c8b2949c5879212783f30960091c10b2531b0f1ba", 0xea}, {&(0x7f00000003c0)="d7dc1b77d1e62e950d752b8c683889aa5410f00b5621339b980fa39deeedb29eb13f9d2fad12cdfc2cd686a7f4", 0x2d}, {&(0x7f0000000580)="22574f5ced21e29cd272095f5a69da6388ea4fa20a1eddf8b2b4079c7852afacefe7880e869c15f271c15e0bc64ce5f803457e2a8a1f262fe08b0a7c6adbed8d68ca757c15549c88105a463db45a315642896b0893427b3052e6409b5b25d6f68998a27f788461ce144588207f00f601db4e946d58ada9dbb930b3f1946204052e7af32286332c812bafe77894c4ae1733bb6ee6be17f98441ba458c1b0c8129d005e7fba058b5ecf0b8075272d2aad02853c7ff74db19487770409960bf9692ec44e8d9fab01c7b", 0xc8}, {&(0x7f0000000680)="0ff5f639bb76f1dfbc5531d4db34b98f2b7d8f03bec276b7b7dc771fc69f505411172304f972c3ef6302cd5fcc23161c9f0cc2b5dde00b79c2ad7042d1e360f0055f09be458bda8b43602e7bda675c710f8f222cdb4c9ee2746b7f804e0bcd4dba086fc36d5e589da0437d19c106516787fd9da295c3ee92125b6c2b3870d8e99e30866b4c8531559c6505eb240ba0d1c5abac8ef1664b83924301c1c019e7496976b793603e1663a3a2f7eb4dee0dc4a7", 0xb1}], 0x4}}], 0x2, 0x40000) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000440), &(0x7f0000000780)=0x8) [ 1123.392445] input: syz1 as /devices/virtual/input/input2043 [ 1123.554216] input: syz1 as /devices/virtual/input/input2044 [ 1123.573309] input: syz1 as /devices/virtual/input/input2045 [ 1123.631879] input: syz1 as /devices/virtual/input/input2046 [ 1123.724600] input: syz1 as /devices/virtual/input/input2047 23:26:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r44, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r44, 0x5502) r45 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r45, &(0x7f0000000400)={'syz1\x00'}, 0x45c) 23:26:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x96dcae0a9eac8385, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendto$inet6(r3, 0x0, 0xfffffe74, 0x20000000, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd94, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x20141042, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x0, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001b40)=@gcm_256={{0x304}, "89165e5cea570fb1", "103691d5e6671e02531da43829b340af411153d22b6c492a00aeaf55c3e257d1", "73fc2e89", "d51a91c819adca99"}, 0x38) ftruncate(r5, 0x280080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) sendfile(r4, r5, 0x0, 0x200800900000003) 23:26:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x70f000, 0x0}) 23:26:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x70f000, 0x0}) 23:26:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death], 0x0, 0x70f000, 0x0}) 23:26:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death], 0x0, 0x70f000, 0x0}) [ 1124.400717] input: syz1 as /devices/virtual/input/input2048 [ 1124.451520] input: syz1 as /devices/virtual/input/input2049 23:26:04 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x7) 23:26:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death], 0x0, 0x70f000, 0x0}) 23:26:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r44, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r44, 0x5502) r45 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r45, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r45, 0x5501, 0x0) 23:26:04 executing program 4: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x16) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645abbd4a8c3275cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f109dc51008a0e3eba7365951c3e9eddcc5c5b7"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 23:26:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r44, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r44, 0x5502) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) 23:26:04 executing program 1: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x16) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645abbd4a8c3275cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f109dc51008a0e3eba7365951c3e9eddcc5c5b7"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 23:26:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @release], 0x0, 0x70f000, 0x0}) 23:26:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @release], 0x0, 0x70f000, 0x0}) 23:26:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @release], 0x0, 0x70f000, 0x0}) 23:26:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1126.550379] binder: 3089:3092 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1126.580192] input: syz1 as /devices/virtual/input/input2051 [ 1126.621420] binder: 3089:3092 Release 1 refcount change on invalid ref 0 ret -22 [ 1126.662907] input: syz1 as /devices/virtual/input/input2052 [ 1126.664372] input: syz1 as /devices/virtual/input/input2053 23:26:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1126.737822] input: syz1 as /devices/virtual/input/input2054 [ 1126.829595] binder: 3104:3105 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1126.844724] input: syz1 as /devices/virtual/input/input2055 [ 1126.911482] binder: 3104:3105 Release 1 refcount change on invalid ref 0 ret -22 23:26:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1127.083492] binder: 3107:3109 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1127.136635] binder: 3107:3109 Release 1 refcount change on invalid ref 0 ret -22 23:26:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000280)) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$getflags(0xffffffffffffffff, 0x401) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x0, {0x0, 0x2, 0x0, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x0, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80}}}}) socket$key(0xf, 0x3, 0x2) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000200)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x42, 0x0) mkdirat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:26:07 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x8) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:26:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:26:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_targets\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x7) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ppoll(&(0x7f0000000040)=[{r2, 0x4040}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)={0x6}, 0x8) 23:26:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r44, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r44, 0x5502) 23:26:07 executing program 4: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x16) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645abbd4a8c3275cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f109dc51008a0e3eba7365951c3e9eddcc5c5b7"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) [ 1129.324647] binder: 3112:3120 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1129.347106] input: syz1 as /devices/virtual/input/input2056 [ 1129.370253] binder: 3112:3120 Release 1 refcount change on invalid ref 0 ret -22 23:26:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1129.508734] input: syz1 as /devices/virtual/input/input2057 [ 1129.534233] binder: 3141:3143 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 23:26:07 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101240, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x79) tkill(r0, 0x3c) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000600)) r7 = syz_open_pts(r6, 0x0) read(r7, &(0x7f0000000080)=""/11, 0xb) fstat(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r5, r8}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r9 = eventfd2(0x0, 0x0) fstat(r9, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r10) write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x5, 0x2, 0x18d1, 0x5, 0x7, 0x81, {0x1, 0x7, 0x4, 0x3f, 0x3, 0x0, 0x1, 0x10001, 0x80000000, 0x3f, 0x1f, r8, r10, 0x3, 0x3}}}, 0x90) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xd6) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1129.585304] binder: 3141:3143 Release 1 refcount change on invalid ref 0 ret -22 23:26:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000140)=[@acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:26:07 executing program 1: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x100) write$P9_RFLUSH(r7, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r7}]) fallocate(r1, 0x4000000000000010, 0x0, 0x7fff) r8 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r8, 0x0, 0x8400fffffffa) [ 1129.671383] binder: 3152:3154 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1129.723208] input: syz1 as /devices/virtual/input/input2058 [ 1129.752370] binder: 3152:3154 Release 1 refcount change on invalid ref 0 ret -22 [ 1129.789798] input: syz1 as /devices/virtual/input/input2059 23:26:07 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xfb}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 23:26:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) close(r3) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = fcntl$dupfd(r1, 0x80c, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000240)=ANY=[], 0x0, 0x70f000, 0x0}) 23:26:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000280)) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$getflags(0xffffffffffffffff, 0x401) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x0, {0x0, 0x2, 0x0, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x0, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80}}}}) socket$key(0xf, 0x3, 0x2) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000200)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x42, 0x0) mkdirat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1130.042448] input: syz1 as /devices/virtual/input/input2060 23:26:08 executing program 4: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x16) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645abbd4a8c3275cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f109dc51008a0e3eba7365951c3e9eddcc5c5b7"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) [ 1130.110977] input: syz1 as /devices/virtual/input/input2061 23:26:08 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000003c0)) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a77, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}) r8 = syz_open_pts(r7, 0x0) read(r8, &(0x7f0000000080)=""/11, 0xb) fstat(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r6, r9}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) bind$packet(r2, &(0x7f0000000140)={0x11, 0x3, r6, 0x1, 0x3, 0x6, @dev={[], 0x2b}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0xfffffffffffffde6) read(r10, &(0x7f0000000200)=""/250, 0x50c7e3e3) r12 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) lstat(0x0, 0x0) connect$inet6(r12, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) memfd_create(&(0x7f0000000040)='comm\x00\xf5\'\xd5\x1eZ[E\x9bH\xe7]\\C\x12\xf6\"t`\x16\xed6\xeb\x0e\xdc\x1b\xdf\x93\xed\xff\x81\"\x98\x89\x14\xb1\xfc\xfa\x02\xbe\xf7)\xf2\xffI\x91\x0e\xf7_J\x9a}XF)\x1d:\x87>t=\xf6\xf1\xfd\x8e\x06\xd6\xd6L\xc4\x87\xfe\xab\x7f\xc8(S\x8c:\x06\x00\x00\x00\x00\x00\x00\x00\x8c\x8a\x02V\x033\xf0\x89\xd8N+\x151J\x96\xdf&\xe0>\xadu\x15\xed\x94\xec%5\x80\xa7~\xbc\x9c3\x90\x97\x1d\xd8j\x0e]P\x0f\xa9*a2\x89Y\xcc$=\xb7\x0f\xd1\x807 T\xec\xb2\xfd\x88M\x99\xa9\xf9\x10t\r\xea\xabv\x1dn\f\x88[\x18\xa6\xcfE\"\x9c\xc1\xdbYW\xac&\xc5\x11c\x85#;\xf9\x9a\x9f9\xd7&\t\x99\xfd\x010\x98/\x13\xe1\xf3\x81\xb3m\xaf\x11\xb3\x9e\xd1\xd7\xc6\x92m\xdd\xba\x01\xbc\xed\x9dl:\x1e\xf8o\x190\xf9\xb2\x1e~\x1fHQ', 0x0) getpid() syz_open_procfs(0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) epoll_create1(0x0) close(0xffffffffffffffff) r13 = dup(0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r13, 0x4c82) socket$key(0xf, 0x3, 0x2) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0) 23:26:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r44, 0x5501, 0x0) [ 1130.209612] input: syz1 as /devices/virtual/input/input2062 [ 1130.314392] input: syz1 as /devices/virtual/input/input2063 23:26:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420000a77, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 23:26:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) close(r3) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = fcntl$dupfd(r1, 0x80c, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000240)=ANY=[], 0x0, 0x70f000, 0x0}) [ 1130.640344] input: syz1 as /devices/virtual/input/input2067 [ 1130.706293] input: syz1 as /devices/virtual/input/input2068 23:26:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10, 0xffffffffffffffda, 0x7}, 0x10) write$apparmor_current(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6368616e6753626520ad000000000000a01613f3b843ac9a0ca07bbae89e05912de9bfaf160c03f136e1971d835a673be1a7d1891ac297d5fcafc22435bb0477099e5af4b1d72533d07c217adedcbd5df52ca0013ec1bfb48a519e76a68a7181248ef13a72aa9b64219d60c65608a4c5b3ce13c7a7e83942a7794b9fafabb96b5406af0def93e224b883f9892a9fe4bdc3ffbbe2238a1337addf192a59aea8274fc30f445e3df3ca49dcd4570dc3cf4fd2b5a11429cab10d2d691d0bdcdf4c352b41d3750fafaad900"], 0x10) personality(0x400000) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) 23:26:10 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r4, 0x0, &(0x7f0000000080)) dup3(r2, r3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420000a77, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r7, 0x607, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) sendto$inet6(r5, &(0x7f0000000180)="47b29bdb5ecbb3c6d6563dfe4ddb8e30c434fc00e06cdd29694b06", 0x1b, 0x821, &(0x7f0000000280)={0xa, 0x4e22, 0xffffff12, @remote, 0x101}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x44800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 23:26:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) 23:26:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r44, 0x5501, 0x0) 23:26:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x5, 0xa50, 0x1ff, 0xffff, 0x8, 0x7}) 23:26:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x2) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000140)=0xfffffffd, 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2e, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendfile(0xffffffffffffffff, r4, &(0x7f0000000280)=0xb3, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0x9, 0x4) tkill(r1, 0x3c) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f00000001c0)={{0x2, @empty, 0x4e24, 0x0, 'wlc\x00', 0x2, 0x0, 0x54}, {@empty, 0x4e23, 0x2, 0x400, 0xda, 0x7fff}}, 0x44) ptrace$setregs(0xd, r1, 0x4, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) write$P9_RCREATE(r0, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x2, 0x0, 0x8}, 0x2}}, 0x18) 23:26:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x45b) r2 = getpgid(0xffffffffffffffff) ptrace$peek(0x2, r2, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x34, 0x8, &(0x7f00000000c0)=[@acquire={0x40046304}, @acquire, @increfs_done={0x40106308, 0x3}, @clear_death={0x400c630f, 0x8}], 0x0, 0x70f000, 0x0}) 23:26:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000005630440200000000e630c400000001f00000000e2ccccc60663044000000000ab161f7c9a1914bddeda0367cae7bc5a162be216d93e710c8645fd5bd987e0e4b4f8f25ae92a7ebb8815c4d85ca740080ccca1b641"], 0x0, 0x70f000, 0x0}) [ 1132.727156] binder: 3249:3251 BC_INCREFS_DONE u0000000000000003 no match [ 1132.735131] binder: 3249:3251 BC_CLEAR_DEATH_NOTIFICATION invalid ref 8 [ 1132.738360] input: syz1 as /devices/virtual/input/input2072 [ 1132.780515] binder: 3259:3260 Acquire 1 refcount change on invalid ref 32 ret -22 [ 1132.789019] binder: 3259:3260 BC_REQUEST_DEATH_NOTIFICATION invalid ref 520093696 [ 1132.803216] binder: 3259:3260 Release 1 refcount change on invalid ref 0 ret -22 [ 1132.821433] binder: 3259:3267 Acquire 1 refcount change on invalid ref 32 ret -22 23:26:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0463044000ffffffff63044007ffffe40e630c4002000000000000000000000906630459000000002b52ce2ea51442db3123acac4996223e5d0e19ae7d08dac8d199de865320ea535ab7ce3c84e338b946c3d201e888e7a9a64f45b788c9b9ddd5982d29a3e9450e592948714d6c099490f7c8927b1e8c75ee66694e675a36dd41fb06ac36a407215d5acfa9ff59776a74fe2896250577a4c0443728b26c04ec1fdde8bb4dfe30e22bc10bb8a02fdc1a1f77a1185eba08e17f85d8c30e06b585"], 0x0, 0x70f000, 0x0}) [ 1132.829172] binder: 3259:3267 BC_REQUEST_DEATH_NOTIFICATION invalid ref 520093696 [ 1132.836846] binder: 3259:3267 Release 1 refcount change on invalid ref 0 ret -22 [ 1132.862330] binder: 3268:3269 unknown command 1074029567 [ 1132.869021] binder: 3268:3269 ioctl c0306201 20000080 returned -22 23:26:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c40000000000000e68ad78a4914677904ac64ed001025ffffff0000066304689c2d477b244000000000"], 0xfffffffffffffc61, 0x70f000, 0x0}) clock_getres(0x2, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000600)) r6 = syz_open_pts(r5, 0x0) read(r6, &(0x7f0000000080)=""/11, 0xb) fstat(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r4, r7}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001380)=0x0) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x1b) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r9, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) splice(r10, 0x0, r11, 0x0, 0x1420000a77, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001740)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000001840)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) r15 = socket$inet6(0xa, 0x2, 0x0) r16 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r16, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r16, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r18 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r18, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r18, 0x40045431, &(0x7f0000000600)) r19 = syz_open_pts(r18, 0x0) read(r19, &(0x7f0000000080)=""/11, 0xb) fstat(r19, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r17, r20}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = openat$random(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/urandom\x00', 0x2000, 0x0) r23 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r23, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r23, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r23, 0x5502) r24 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r24, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r24, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r24, 0x5502) r25 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r25, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r25, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r25, 0x5502) r26 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r26, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r26, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r26, 0x5502) r27 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r27, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r27, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r27, 0x5502) r28 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r28, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r28, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r28, 0x5502) r29 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r29, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r29, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r29, 0x5502) r30 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r30, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r30, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r30, 0x5502) sendmsg$netlink(r1, &(0x7f0000001ac0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)=[{&(0x7f0000000140)={0x120c, 0x16, 0x400, 0x70bd25, 0x25dfdbfd, "", [@generic="7a942c1e6eb0938cbed2429cece2", @generic="74882f2f2dcfe998eb3a4cddad810e942c9a3f0b55aa24841385afd6fa2f5ae02c91e2f118e7cc83ee9b9ce24ee3fbd67720a3fd59469715c88d52c2e21d1ff9b59451c953493b95996e7913983a2a0712277f4c84e87c692a5ea67c93dbb1f615ef46b90ef7a9fec47545e9c9774218bb0da40ebe987ec7f42271bd7ec7105e556210c8d8cf8c4fb9d096720b97c9d4323fe6348cc229c55db7664c9b33", @nested={0x3c, 0x66, [@typed={0xc, 0x11, @u64=0x3}, @typed={0x14, 0x1b, @ipv6=@mcast2}, @typed={0x8, 0x5a, @fd=r1}, @typed={0x8, 0x77, @uid=0xee01}, @typed={0x8, 0x4f, @u32}]}, @typed={0x8, 0xe, @u32=0x6}, @generic="85d0624e6ed64f3ca43715647c0abdd5301faea58072496631f0a7bba41c3553e6539482bbef7c1581633f472db305f32dcade2741bb006e4252975a96d92cc5ba164d08e73b02d9be326da10d3b71582081a2e014ac92492156c42ee372c0ddaef82981f417bf03caa02d351239f2735c18b4e882f590d41476c90e4650d8cc14e5f80e3c70a56d51a9ce1f3c163f195638a1a5070b9a5f10eff1e5a90e36fd424cac145ba6f81c36c59da9001aa18f2b58108766bb0313094bacf59373d98373ee7b78595412dbb2716aa8c4f58caa600a7251dfd355690f72733f2adf917c6350e5f6aa7504eb9d120bbc6e5193ba5b2950f2678c573814d216a0", @generic="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", @typed={0x8, 0x27, @uid=r7}, @typed={0x8, 0x66, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x120c}, {&(0x7f00000013c0)={0x30, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, "", [@nested={0x20, 0x7c, [@typed={0x8, 0x18, @pid=r8}, @typed={0x14, 0x7a, @ipv6=@loopback}]}]}, 0x30}, {&(0x7f0000001400)={0x2d0, 0x30, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@generic="42fcddbc493fd13df5bf46f66a1f0e3468774ddba25a1a1a63247693f6ba3460f261750599c1b1dbe519c851cada7e42c0ecd0a44b20995f89ea769e6333cbcfc40d4319be4a4fd8afc44c1022b1628f7f1a80757776ce15c52609537e850c8ab6858b0e0a2e404bad58ab7091d7a6efc2ace2dbd88f3aeb1dcf9824667a9ae2bb22ab89c9f096ac8ad4db2c48118e4468c4e06463131f935b589b0a", @typed={0x14, 0x6, @str='/dev/binder#\x00'}, @nested={0x210, 0x90, [@generic="9b38ae6eac1b9cebba62f811a1ba8c2dd1438ef3af5d20a7a3b453bb97c7e438ae8559ba60", @typed={0x14, 0x74, @str='nodevmime_type\x00'}, @typed={0x8, 0x29, @u32=0x9}, @generic="abf378fec714f9d2dcb4d0df06f5b61e8d3f14d5dd67b67547ca17b4fdfa038da6b84210f16792e43038b795b9dfb9e7e927f095be0821674cc30c49b725d75244944f20b0e050b59a9d8d2922c0222c9c09a6074c38844a91de169f517e6a4bc409889a0e3a3ddc3ecdd24b78ff80899278ed94bf5a536b", @generic="3d52a31daaedd34784cd30ea2e109f27960e37e586de7765f681e679be7b602610587adfbd8351f07aeb03c93ae7360e101743ddb21eee9e0a0d697e286d72ebcc9ff66de9e088b7cf3f437d5ca4c6b378e2a93be093b80b721ee459191d9256a91a673e098cfcf1164f18057771c795bfa2d80a49b4d69216f7c940c48f3bd3bda158816043cf17f7e2b8b2ee97add506a7c6ad49bb40d20c8e49432434585affa44e1794f4ddaa38c8c366bf4082b0b14f3a8c2a3a2fd5d214456f8d82", @generic="909013a67b3651cb377ce0a67f3e13e794b11727842b04ae364d244712b11f12cff94d12f318e7bca48f346206db1de7dd473db1422e2896cf77b18bb8e127ed66dc24f71c893221f5b1bbc870f239701937bce6fbb7adc6c68e1cbad25bc0c0f698215c2442aa31c546f4bdd73aaa75e8083e2bcda503530a6a1e49b05facdc25dc69e6069c73ab95c3ee093677a02c184c4f"]}]}, 0x2d0}], 0x3, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {r9, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r20, r21}}}, @rights={{0x24, 0x1, 0x1, [r22, r23, r1, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r24, r0, r25, r26, r27, r28, r29]}}, @rights={{0x14, 0x1, 0x1, [r30]}}], 0xb8, 0x80}, 0x4884) [ 1132.879800] binder: 3268:3275 unknown command 1074029567 [ 1132.886033] binder: 3268:3275 ioctl c0306201 20000080 returned -22 23:26:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl(r1, 0x2, &(0x7f0000000180)="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") [ 1132.928313] binder: 3276:3277 unknown command -1408992921 [ 1132.934039] binder: 3276:3277 ioctl c0306201 20000080 returned -22 [ 1132.966323] input: syz1 as /devices/virtual/input/input2074 [ 1133.010552] input: syz1 as /devices/virtual/input/input2076 [ 1133.019864] input: syz1 as /devices/virtual/input/input2075 [ 1133.027615] binder: BINDER_SET_CONTEXT_MGR already set [ 1133.035588] binder: 3278:3279 ioctl 40046207 0 returned -16 [ 1133.042566] binder: 3278:3282 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1133.057307] binder: 3278:3282 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1133.064343] binder: 3278:3282 Release 1 refcount change on invalid ref 0 ret -22 [ 1133.076475] input: syz1 as /devices/virtual/input/input2077 23:26:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x82, &(0x7f0000000180)="e7da6ef7492d77c79b882c30f18f8c70d4d1b66f0ec9453a593db1bcada958dddd665b48f28efabadafe860c46e55f504d80c94d9d623b57edf7a0ebd5e00f44e725994aee942f5e12055d27e8aceb0702e8a9821a2bb2d90ff7f39e3330fb6456aeca06974ed6ddcb488c3fc2d463ad293b135b5af0b4fe38fa363d2ec727dd2e9f", 0x35, 0x0, &(0x7f0000000040)="9b2193785fe47ea1c9be71ddd9b94b15ed8dbf228a7cf63d15eed0010aa5c46de8be46cfe138d604e11f87dd5b26e82bac91aeee99"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00') [ 1133.139864] input: syz1 as /devices/virtual/input/input2079 [ 1133.227026] input: syz1 as /devices/virtual/input/input2080 [ 1133.296366] input: syz1 as /devices/virtual/input/input2082 23:26:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x82, &(0x7f0000000180)="e7da6ef7492d77c79b882c30f18f8c70d4d1b66f0ec9453a593db1bcada958dddd665b48f28efabadafe860c46e55f504d80c94d9d623b57edf7a0ebd5e00f44e725994aee942f5e12055d27e8aceb0702e8a9821a2bb2d90ff7f39e3330fb6456aeca06974ed6ddcb488c3fc2d463ad293b135b5af0b4fe38fa363d2ec727dd2e9f", 0x35, 0x0, &(0x7f0000000040)="9b2193785fe47ea1c9be71ddd9b94b15ed8dbf228a7cf63d15eed0010aa5c46de8be46cfe138d604e11f87dd5b26e82bac91aeee99"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00') [ 1133.548868] input: syz1 as /devices/virtual/input/input2084 23:26:11 executing program 3: eventfd2(0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000580)=0x6) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RRENAME(r3, &(0x7f0000000900)={0x7}, 0x7) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000080)=0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x80) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r1, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x40002f0, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r8 = dup(r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0210040007000000002000000000000008001200000000000000000006000000e7ffe8000000000000000000000000000000000000000000cd006ef795a63b19298b6e28198740e6fe7a33ab3c119d5059d8bf7de10b38ab04ceee0f528a22e0ead8edf3fa7a0926e9dc47b62d379d04cadc8f7ce4acc476e53dd7f4395d3a2db614b959e93fdc27afdeb76141e95296ca7211c6d9133273474fbc379d8340b2cd2057c273d4b235c885f0015c7faf3dfb14ee1591e377523afcb638deeddfa90d690592e742ba381e08148e991636866c6e16e4677e205200000000000000000a6ca5cfb983688989f18cb5360df5c6021cf3bc6ea569246bd9f754ff1e381dcf8c84b0b4f3fa1b95348753e629a6dd4d455cc366feb3b91e2f9ce3661c1f142ca0293cec14e7b9ecaef6c4f6e89d698f31533df308f179969c27ff1b5f704a2019349fae8ae89048100fa2113e457507d5912f00000000000000000000000000000076700d538c6c6d0809e2851722095388c8bf829e6125c6b28d73abff4c608abde625ffffff7f1baa1ef8da4db0063b3f39dc8defe21cdaf8be038f77f8a7111152f78e1d7593abc2e46f8d3fe805ac5b752c9aed653549851c126db97ec5b4e62f20ecf4db9a6e616c6efed1192d062bcd8806e93dba1ec2f7721a08b14f5f17109d8f0e5a3af2c57260e15554e0f93bf828262d051dfae08600070f0b78a3939ec44bd7b4285ecd7041981ea90c207ac05ef93dec0dbd99611794bc26812b831eb28e7b69bc67573b32ccf52b6776887669bd4420ec107ef56631d7c965bcaeaff28f86771fd6211e99f3adfbb58b9872f9f07913c3a34dc681c51bf88fce2bd5f78b0f78978610d08f3c1acde9f960847a27d39c582407e93e636d0976ee904184ba39b850924fded5b374b362bc047d25ab068703a4e8fe1807aaea4e4a4ccbc4bad65d5f91e6c398d88ff17dc67c7ff6bd6d776b7adec35fcd4fa6ddff57869d32f92e97f47da9c89e8cecd0ee00005027dff9b5ae35df81f632969f40309077a3eb2ab2c520df2f3845e3323342839e4f22d03bfa5f8afbfd2795335403592c61e13f7fb17bf67292d18013807d9db7993aa2691baf2a2f4effdcf093380fdfec203b10f3bbd267035dad4e92ba831ccf87270ec5083b400f093601ec6f0cae8e25df93af448818ee381c9d2eb09c3d61355b35778edd9181c336e2085580f58e438fa8b1f05b7079007c1b8dd1d612f893f7798131941ce0fb30df20e56dfe84646a2b7b0cef154f6393eb7a020b40eea4462d094d9873a1e6a19f20194894d14e36a464fa5ebcb9f552bd484d917e244196c64a6b30f74ed8d37bc6fa54e4a0135b987c3d30ea06fc8858d1dce594c9bde06360d741ac4da14dc4a74df6f0ca502d9e4fba790d0a31de20562d8700305154e55cd05e4644d413d462cf327c3b22f765de97a6c24b1911fb2111309acabe64b0c42ee8aaa11a311a1c19ef5389cd00f353a17d23605ca20d33b10b53f2832d18c6e072d92fa3b2923595882bce541a7c0ff588517438eb04cfc75c056dec9481307b6220716bb76b48dd7ceca8f21cfae3b52cd60c5b451fc0c0f58d5f05b010eef5063e921d5039f3715322e1f84edc48113024985625e1c141c3a8e1dd75789b6583a81e7ac49ad4755d93741918aa0920811b0582b4e121efc89138b20a18ffe576b84ffd3dcfa99a653facf5223f74686ecb818ab95eb0fac0c9f576250be7587a4050eb6b6ff5c312fd6b974e066afd471ba12b8c491de42641d46f360108fe1d941f5eab1c61ae59500f286b6ed982fcdafda67d4cbe47b725275a1989f564d91180725bca7db01252909f272cefaab623651686f26e497bdea38ca3ac08be35b9c234abf2e3a60b1772ea9168256e6cf336129d520d60917ef89e14930b48fd3a644defdd357952025133a050633ca794aedff6e1e67fdb0383141f7613974c68b78a59bebb2e7f88cf974d6fbf2abf0d00"/1433], 0x437}}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x42, @loopback}, 0xffffffffffffffd1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r11, 0x0, 0x0, 0x3) lseek(r11, 0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r12 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r12, 0x0, 0x20008) r13 = socket$inet6_udp(0xa, 0x2, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r14, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd) r16 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r17}) setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x32, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet_mreqn(r12, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r17}, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r18 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x8) sendfile(0xffffffffffffffff, r18, 0x0, 0x20008) r19 = socket$inet6_udp(0xa, 0x2, 0x0) r20 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r20, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x4, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0x1, 0x3}, 0x20) r21 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, r21, &(0x7f00000002c0)=0x202, 0xdd) ioctl$sock_inet6_SIOCSIFADDR(r20, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) setsockopt$inet6_IPV6_PKTINFO(r19, 0x29, 0x32, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet_mreqn(r16, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2}, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x17100010}, 0xc, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="000128bd7000fedbdf25020000000800", @ANYRES32=r7, @ANYBLOB="9800020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63", @ANYRES32=r7, @ANYBLOB="4400020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r17, @ANYBLOB="f04e48e100020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b3db420c9c60864a0000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004005b4800003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="10f8f27cf6030000002e4ac591106feeb30e6aa1c07e7a4e0df586cc3ecb12010000000000000063e47a02adc1397b31d2cf7d973ba6f6c16585a1a2d37f7ef6acb2d5064115dc66ad4cfe4ecd86a58fd642e62fdc79905db5f0fb4179ac6ea9b2a7c471430e9c107b9a9be47b1b00", @ANYRES32, @ANYBLOB="0001020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e636500400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400800002020080000006000706010000"], 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x8000) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) write$nbd(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="674466ae0000000006000200009b03a4fedba4de4c9ab9d71561a52047da263d9b80cf8e9a7dea7e2ce4f2d1ffff76429723517c46149c8e8408b71b5825000000000000007f110a506fb04ec637ef8e6ec13dcddafe7a25a0d15b5d67b66992602b2c81e96637ebabfa12c7399e21b0df77dfc74e5cf9e76f3f39a601d4c5cd656b1ac677cee19ddf7bcd9b81a35917ad030ee588bd92082c2cb77472f39248b10cdc3fdb2559ff519361b9c986e54a5e53058e2599ce4a17c84e93cb26d5584fa6e89b7fe68b101b448683000800005681eee961e1e576"], 0x10) 23:26:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 23:26:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) r44 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r44, &(0x7f0000000400)={'syz1\x00'}, 0x45c) 23:26:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) [ 1133.944170] input: syz1 as /devices/virtual/input/input2086 [ 1133.967297] input: syz1 as /devices/virtual/input/input2087 23:26:13 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000140)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:26:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O}\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\x05\x00\xb7I\x12\x80\xa9\xc9eih\x8b\xe5\xfa\xbf\xd2<\x996\x88\\gos\xf6\x8806\x03x\xdf\xa1\xc3|\x13\fa\x10\xf1\x15\x12 \x12T\x1d]\xbe$\xd6\x10C?\x04\x83\xe1\xd3\xac|X\xfdtR\xc6\x1d\x80\xc3C') r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000580)=0x6) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RRENAME(r3, &(0x7f0000000900)={0x7}, 0x7) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000080)=0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x80) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r1, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x40002f0, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r8 = dup(r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0210040007000000002000000000000008001200000000000000000006000000e7ffe8000000000000000000000000000000000000000000cd006ef795a63b19298b6e28198740e6fe7a33ab3c119d5059d8bf7de10b38ab04ceee0f528a22e0ead8edf3fa7a0926e9dc47b62d379d04cadc8f7ce4acc476e53dd7f4395d3a2db614b959e93fdc27afdeb76141e95296ca7211c6d9133273474fbc379d8340b2cd2057c273d4b235c885f0015c7faf3dfb14ee1591e377523afcb638deeddfa90d690592e742ba381e08148e991636866c6e16e4677e205200000000000000000a6ca5cfb983688989f18cb5360df5c6021cf3bc6ea569246bd9f754ff1e381dcf8c84b0b4f3fa1b95348753e629a6dd4d455cc366feb3b91e2f9ce3661c1f142ca0293cec14e7b9ecaef6c4f6e89d698f31533df308f179969c27ff1b5f704a2019349fae8ae89048100fa2113e457507d5912f00000000000000000000000000000076700d538c6c6d0809e2851722095388c8bf829e6125c6b28d73abff4c608abde625ffffff7f1baa1ef8da4db0063b3f39dc8defe21cdaf8be038f77f8a7111152f78e1d7593abc2e46f8d3fe805ac5b752c9aed653549851c126db97ec5b4e62f20ecf4db9a6e616c6efed1192d062bcd8806e93dba1ec2f7721a08b14f5f17109d8f0e5a3af2c57260e15554e0f93bf828262d051dfae08600070f0b78a3939ec44bd7b4285ecd7041981ea90c207ac05ef93dec0dbd99611794bc26812b831eb28e7b69bc67573b32ccf52b6776887669bd4420ec107ef56631d7c965bcaeaff28f86771fd6211e99f3adfbb58b9872f9f07913c3a34dc681c51bf88fce2bd5f78b0f78978610d08f3c1acde9f960847a27d39c582407e93e636d0976ee904184ba39b850924fded5b374b362bc047d25ab068703a4e8fe1807aaea4e4a4ccbc4bad65d5f91e6c398d88ff17dc67c7ff6bd6d776b7adec35fcd4fa6ddff57869d32f92e97f47da9c89e8cecd0ee00005027dff9b5ae35df81f632969f40309077a3eb2ab2c520df2f3845e3323342839e4f22d03bfa5f8afbfd2795335403592c61e13f7fb17bf67292d18013807d9db7993aa2691baf2a2f4effdcf093380fdfec203b10f3bbd267035dad4e92ba831ccf87270ec5083b400f093601ec6f0cae8e25df93af448818ee381c9d2eb09c3d61355b35778edd9181c336e2085580f58e438fa8b1f05b7079007c1b8dd1d612f893f7798131941ce0fb30df20e56dfe84646a2b7b0cef154f6393eb7a020b40eea4462d094d9873a1e6a19f20194894d14e36a464fa5ebcb9f552bd484d917e244196c64a6b30f74ed8d37bc6fa54e4a0135b987c3d30ea06fc8858d1dce594c9bde06360d741ac4da14dc4a74df6f0ca502d9e4fba790d0a31de20562d8700305154e55cd05e4644d413d462cf327c3b22f765de97a6c24b1911fb2111309acabe64b0c42ee8aaa11a311a1c19ef5389cd00f353a17d23605ca20d33b10b53f2832d18c6e072d92fa3b2923595882bce541a7c0ff588517438eb04cfc75c056dec9481307b6220716bb76b48dd7ceca8f21cfae3b52cd60c5b451fc0c0f58d5f05b010eef5063e921d5039f3715322e1f84edc48113024985625e1c141c3a8e1dd75789b6583a81e7ac49ad4755d93741918aa0920811b0582b4e121efc89138b20a18ffe576b84ffd3dcfa99a653facf5223f74686ecb818ab95eb0fac0c9f576250be7587a4050eb6b6ff5c312fd6b974e066afd471ba12b8c491de42641d46f360108fe1d941f5eab1c61ae59500f286b6ed982fcdafda67d4cbe47b725275a1989f564d91180725bca7db01252909f272cefaab623651686f26e497bdea38ca3ac08be35b9c234abf2e3a60b1772ea9168256e6cf336129d520d60917ef89e14930b48fd3a644defdd357952025133a050633ca794aedff6e1e67fdb0383141f7613974c68b78a59bebb2e7f88cf974d6fbf2abf0d00"/1433], 0x437}}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x42, @loopback}, 0xffffffffffffffd1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r11, 0x0, 0x0, 0x3) lseek(r11, 0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r12 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r12, 0x0, 0x20008) r13 = socket$inet6_udp(0xa, 0x2, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r14, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd) r16 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r17}) setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x32, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet_mreqn(r12, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r17}, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r18 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x8) sendfile(0xffffffffffffffff, r18, 0x0, 0x20008) r19 = socket$inet6_udp(0xa, 0x2, 0x0) r20 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r20, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x4, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0x1, 0x3}, 0x20) r21 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, r21, &(0x7f00000002c0)=0x202, 0xdd) ioctl$sock_inet6_SIOCSIFADDR(r20, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) setsockopt$inet6_IPV6_PKTINFO(r19, 0x29, 0x32, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet_mreqn(r16, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2}, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x17100010}, 0xc, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="000128bd7000fedbdf25020000000800", @ANYRES32=r7, @ANYBLOB="9800020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63", @ANYRES32=r7, @ANYBLOB="4400020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r17, @ANYBLOB="f04e48e100020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b3db420c9c60864a0000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004005b4800003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="10f8f27cf6030000002e4ac591106feeb30e6aa1c07e7a4e0df586cc3ecb12010000000000000063e47a02adc1397b31d2cf7d973ba6f6c16585a1a2d37f7ef6acb2d5064115dc66ad4cfe4ecd86a58fd642e62fdc79905db5f0fb4179ac6ea9b2a7c471430e9c107b9a9be47b1b00", @ANYRES32, @ANYBLOB="0001020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e636500400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400800002020080000006000706010000"], 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x8000) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) write$nbd(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="674466ae0000000006000200009b03a4fedba4de4c9ab9d71561a52047da263d9b80cf8e9a7dea7e2ce4f2d1ffff76429723517c46149c8e8408b71b5825000000000000007f110a506fb04ec637ef8e6ec13dcddafe7a25a0d15b5d67b66992602b2c81e96637ebabfa12c7399e21b0df77dfc74e5cf9e76f3f39a601d4c5cd656b1ac677cee19ddf7bcd9b81a35917ad030ee588bd92082c2cb77472f39248b10cdc3fdb2559ff519361b9c986e54a5e53058e2599ce4a17c84e93cb26d5584fa6e89b7fe68b101b448683000800005681eee961e1e576"], 0x10) 23:26:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x4, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x2}, @free_buffer, @enter_looper, @acquire, @free_buffer={0x40086303, r2}], 0x8c, 0x0, &(0x7f0000000180)="784263bd71feed38d7f9b7fa7f61511b516b3208b29fd335ea32afb4980dc8101380dc9538350af9748669836e4e74ac9800b978b43b3423f6749fc1f6b2d184b8aa4a20ad6c0fa6d1f9fcab6992332413d137c75664ac2d30a0cd91c648cb81d0c5902bd8567f3d42b686d6857953918b825c29c9c05ae0f00745afeb39c7394354e6b0cc44f29031115804"}) 23:26:13 executing program 1: eventfd2(0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000580)=0x6) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RRENAME(r3, &(0x7f0000000900)={0x7}, 0x7) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000080)=0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x80) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r1, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x40002f0, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r8 = dup(r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1433], 0x437}}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x42, @loopback}, 0xffffffffffffffd1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r11, 0x0, 0x0, 0x3) lseek(r11, 0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r12 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r12, 0x0, 0x20008) r13 = socket$inet6_udp(0xa, 0x2, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r14, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd) r16 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r17}) setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x32, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet_mreqn(r12, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r17}, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r18 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x8) sendfile(0xffffffffffffffff, r18, 0x0, 0x20008) r19 = socket$inet6_udp(0xa, 0x2, 0x0) r20 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r20, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x4, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0x1, 0x3}, 0x20) r21 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, r21, &(0x7f00000002c0)=0x202, 0xdd) ioctl$sock_inet6_SIOCSIFADDR(r20, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) setsockopt$inet6_IPV6_PKTINFO(r19, 0x29, 0x32, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet_mreqn(r16, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2}, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x17100010}, 0xc, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="000128bd7000fedbdf25020000000800", @ANYRES32=r7, @ANYBLOB="9800020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63", @ANYRES32=r7, @ANYBLOB="4400020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r17, @ANYBLOB="f04e48e100020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b3db420c9c60864a0000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004005b4800003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="10f8f27cf6030000002e4ac591106feeb30e6aa1c07e7a4e0df586cc3ecb12010000000000000063e47a02adc1397b31d2cf7d973ba6f6c16585a1a2d37f7ef6acb2d5064115dc66ad4cfe4ecd86a58fd642e62fdc79905db5f0fb4179ac6ea9b2a7c471430e9c107b9a9be47b1b00", @ANYRES32, @ANYBLOB="0001020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e636500400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400800002020080000006000706010000"], 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x8000) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) write$nbd(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="674466ae0000000006000200009b03a4fedba4de4c9ab9d71561a52047da263d9b80cf8e9a7dea7e2ce4f2d1ffff76429723517c46149c8e8408b71b5825000000000000007f110a506fb04ec637ef8e6ec13dcddafe7a25a0d15b5d67b66992602b2c81e96637ebabfa12c7399e21b0df77dfc74e5cf9e76f3f39a601d4c5cd656b1ac677cee19ddf7bcd9b81a35917ad030ee588bd92082c2cb77472f39248b10cdc3fdb2559ff519361b9c986e54a5e53058e2599ce4a17c84e93cb26d5584fa6e89b7fe68b101b448683000800005681eee961e1e576"], 0x10) 23:26:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xa07) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r2, r1, 0x0) r5 = getpid() ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000080)={0x36, 0x8, 0x7f}) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420000a77, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000600)) r12 = syz_open_pts(r11, 0x0) read(r12, &(0x7f0000000080)=""/11, 0xb) fstat(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r10, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r15, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r17, 0x40045431, &(0x7f0000000600)) r18 = syz_open_pts(r17, 0x0) read(r18, &(0x7f0000000080)=""/11, 0xb) fstat(r18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r16, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r21 = socket$nl_route(0x10, 0x3, 0x0) splice(r20, 0x0, r21, 0x0, 0x1420000a77, 0x0) accept4$inet6(r20, &(0x7f0000002f80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002fc0)=0x1c, 0x81c00) memfd_create(&(0x7f0000004700)='^eth0\x00', 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004740)) r22 = eventfd2(0x0, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r23) r24 = socket$inet6(0xa, 0x2, 0x0) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r25, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r27, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r27, 0x40045431, &(0x7f0000000600)) r28 = syz_open_pts(r27, 0x0) read(r28, &(0x7f0000000080)=""/11, 0xb) fstat(r28, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r26, r29}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r30 = eventfd2(0x0, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r31) r32 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r32, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r32, 0xc0502100, &(0x7f0000004780)) r33 = socket$inet6(0xa, 0x2, 0x0) r34 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r34, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r36, 0x40045431, &(0x7f0000000600)) r37 = syz_open_pts(r36, 0x0) read(r37, &(0x7f0000000080)=""/11, 0xb) fstat(r37, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r35, r38}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r39 = eventfd2(0x0, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r40) getgroups(0x1, &(0x7f0000004800)=[r40]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000004840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@empty, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004980)=0xe8) r41 = eventfd2(0x0, 0x0) fstat(r41, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r42) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000700)={0xf74, 0x3}) dup(0xffffffffffffffff) r43 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r43, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r43, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r43, 0x5502) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x1, 0x18801) 23:26:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffeea, 0x8, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x2}, @increfs_done={0x40106308, 0x2}, @exit_looper, @release], 0x0, 0x70f000, 0x0}) [ 1135.717490] ------------[ cut here ]------------ [ 1135.723040] WARNING: CPU: 0 PID: 3337 at mm/gup.c:388 __get_user_pages+0xae7/0xfd0() [ 1135.740946] Kernel panic - not syncing: panic_on_warn set ... [ 1135.740946] [ 1135.748374] CPU: 0 PID: 3337 Comm: syz-executor.4 Not tainted 4.4.174+ #4 [ 1135.755304] 0000000000000000 73da20a8e89dea9b ffff8801d72ef890 ffffffff81aad1a1 23:26:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='\x00\x00\x05\x00\x00\x00\x00\xf2\xff\xf8\x00', 0x0, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 1135.763672] 0000000000000000 ffffffff82835ee0[ 1135.768192] binder: BINDER_SET_CONTEXT_MGR already set [ 1135.768200] binder: 3348:3349 ioctl 40046207 0 returned -16 [ 1135.779178] ffffffff82892ea0 0000000000000184 [ 1135.784345] ffffffff8142cb27 ffff8801d72ef970 ffffffff813a48c2 0000000041b58ab3 [ 1135.792429] Call Trace: [ 1135.795017] [] dump_stack+0xc1/0x120 [ 1135.800387] [] ? __get_user_pages+0xae7/0xfd0 [ 1135.806536] [] panic+0x1b9/0x37b [ 1135.811557] [] ? add_taint.cold+0x16/0x16 23:26:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c40000000000000000000000000066304400000000075a6b1a6bf76122c4a2412c9a8b2347cea2b995765363594d9671eb1f0571fc7342d970e51537e2ae7b9188b026dec9fd16509c3fa8d18dae253ad95ba54c5bb3468a98ffb9bed123f850b67cde4d2dc5fceaba5f4f815bfdc0fc00149706116ac01dcd964e85db9f6c3105039dbf3bf1f938e1908f7ee130d5ea0562ec1b6055b20ef263e14b7ec29ab67325920e89c82d0d400beb0f753c77b09440d5ab9"], 0x0, 0x70f000, 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62ef]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xfffffe97) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000600)) r8 = syz_open_pts(r7, 0x0) read(r8, &(0x7f0000000080)=""/11, 0xb) fstat(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @broadcast}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r6, r9}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x5, 0x4e21, 0xb05, 0xa, 0x80, 0x20, 0x21, r3, r9}, {0x4, 0x30fc, 0x12, 0x100000000, 0x40, 0x1000, 0x10000}, {0x2, 0xb9, 0x59f08c7e, 0x100000001}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x16}, 0x4d4, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x34ff, 0x1, 0x2, 0x27, 0x20, 0x6, 0x7fffffff}}, 0xe8) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00') [ 1135.817358] [] ? memset+0x32/0x40 [ 1135.822463] [] ? warn_slowpath_common.cold+0x5/0x20 [ 1135.829131] [] warn_slowpath_common.cold+0x20/0x20 [ 1135.837909] [] warn_slowpath_null+0x2a/0x30 [ 1135.843893] [] __get_user_pages+0xae7/0xfd0 [ 1135.849875] [] ? follow_page_mask+0x10d0/0x10d0 [ 1135.856207] [] ? __access_remote_vm+0xc9/0x3c0 [ 1135.862451] [] get_user_pages+0x6d/0x90 [ 1135.868203] [] __access_remote_vm+0x1e3/0x3c0 [ 1135.874376] [] ? do_page_mkwrite+0x360/0x360 [ 1135.875871] input: syz1 as /devices/virtual/input/input2089 [ 1135.886171] [] ? check_stack_object+0x114/0x160 [ 1135.892500] [] access_remote_vm+0x36/0x50 [ 1135.898306] [] mem_rw.isra.0+0x178/0x320 [ 1135.904113] [] mem_write+0x55/0x70 [ 1135.909311] [] __vfs_write+0x116/0x3d0 [ 1135.914856] [] ? mem_rw.isra.0+0x320/0x320 [ 1135.920748] [] ? __vfs_read+0x3c0/0x3c0 [ 1135.926381] [] ? check_preemption_disabled+0x3c/0x200 [ 1135.933234] [] ? check_preemption_disabled+0x3c/0x200 [ 1135.940085] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 1135.946935] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1135.953612] [] ? __sb_start_write+0x14f/0x310 [ 1135.959774] [] vfs_write+0x182/0x4e0 [ 1135.965139] [] SyS_write+0xdc/0x1c0 [ 1135.970758] [] ? SyS_read+0x1c0/0x1c0 [ 1135.976215] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 1135.982709] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 1135.989914] Kernel Offset: disabled [ 1135.993634] Rebooting in 86400 seconds..