89043525d3ddd494ae985e53468473c711971a0f1c6201ef789867a6a6a43da1331e65f4e1a7cff734508108e299bb2ba8fae27b9f3b46f1329d14223f181cfcf9590b42ecbeeee9de504ee9fda58c875dd97bd55aaa5ab2174a9cbbe23d5609a63c3951d7616db09dcf49a514cf714acee2f2773517cdc617e6e49edc138789a290e2500002e272bde30b3d5eb58cb44445581208d995f05768037f6ec66c9bed1ce1c7f2072713dd85abbbdb21660f374864ea3fa9cbe56a0adecb649a78d6b562c51b10a865c7ac4d5ef7fd9cb9fb7d7c074e00fcfae3a24340eed6e1d0000000000000000000000000000000000"], 0x4b7)
write$binfmt_elf64(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb49)

12:09:04 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf7c, 0xf94, 0x5, {"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"}}}, 0x0, 0xf96}, 0x20)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=""/240, &(0x7f0000000300)=0xf0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000001740)=0xc)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, r0, 0x0, 0x2000005)
flock(r2, 0x1)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000480)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="eba2a7882f095af51a5d472c6fda058cf0b114f4687a703bb62fb29f59a0b5d5c4d021db86397137eda64715ff17e86787f4d35312f0386d674ede93790eefaaa29be78c961e26a5666e4556e13ae4bbf76b716e4146c51956009640cb918cfc2a67c1fe", 0x64}], 0x1, 0x0, 0x0, 0x811}, 0x4000040)
flock(0xffffffffffffffff, 0xa)
flock(r1, 0x9)
ioctl$TIOCCBRK(r3, 0x5428)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
fcntl$setpipe(r2, 0x407, 0xe1)

[  368.251396] ptrace attach of "/root/syz-executor3"[14524] was attempted by "/root/syz-executor3"[14527]
12:09:04 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00')
fstat(r0, &(0x7f0000001100))

12:09:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

12:09:04 executing program 3:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

12:09:04 executing program 1:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0xfffffffffffffc85)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000008dc0)='./file1\x00')
lseek(r0, 0x2d, 0x0)

12:09:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

[  368.633132] netlink: 'syz-executor3': attribute type 29 has an invalid length.
[  368.640706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  368.649626] netlink: 'syz-executor3': attribute type 29 has an invalid length.
[  368.657108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  368.794011] netlink: 'syz-executor3': attribute type 29 has an invalid length.
[  368.801570] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
12:09:04 executing program 5:
vmsplice(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000080)="2bffedc9465600b788cb1c0d88004bd10feeb2df5da981dfe777339ab6", 0x1d}], 0x1, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x220000002b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

12:09:04 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000008c0), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x4b7)
write$binfmt_elf64(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb49)

12:09:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

[  368.944271] netlink: 'syz-executor3': attribute type 29 has an invalid length.
[  368.951949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  368.960700] netlink: 'syz-executor3': attribute type 29 has an invalid length.
[  368.968189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
12:09:05 executing program 1:
syz_genetlink_get_family_id$tipc2(0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200))
seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x74, 0x0, 0x0, 0xdae6}]})
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x341, 0x0)

[  368.994912] netlink: 'syz-executor3': attribute type 29 has an invalid length.
[  369.002424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
12:09:05 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

12:09:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000280)="0a5c1f0205006285719070")
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x14)
listen(r1, 0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140f}]}, &(0x7f00000001c0)=0x10)

[  369.528213] print_req_error: I/O error, dev loop5, sector 648
12:09:05 executing program 2:

12:09:05 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
recvmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:05 executing program 1:

12:09:05 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

12:09:05 executing program 4:

12:09:05 executing program 3:

[  369.746297] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
12:09:05 executing program 1:

12:09:05 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

12:09:05 executing program 4:

12:09:05 executing program 2:

12:09:06 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
recvmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:06 executing program 3:

12:09:06 executing program 1:

12:09:06 executing program 4:

12:09:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

12:09:06 executing program 2:

12:09:06 executing program 1:

12:09:06 executing program 4:

12:09:06 executing program 3:

12:09:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

12:09:06 executing program 2:

12:09:06 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
recvmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:06 executing program 1:

12:09:06 executing program 4:

12:09:06 executing program 2:

12:09:06 executing program 3:

12:09:07 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
recvmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

12:09:07 executing program 4:

12:09:07 executing program 1:

12:09:07 executing program 2:

12:09:07 executing program 3:

12:09:07 executing program 4:

12:09:07 executing program 1:

12:09:07 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0xce]})

12:09:07 executing program 3:

12:09:07 executing program 4:

12:09:07 executing program 2:

12:09:07 executing program 1:

12:09:07 executing program 4:

12:09:07 executing program 2:

12:09:07 executing program 3:

12:09:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0)

12:09:07 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:08 executing program 3:

12:09:08 executing program 1:

12:09:08 executing program 2:

12:09:08 executing program 4:

12:09:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0xce]})

12:09:08 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:08 executing program 3:

12:09:08 executing program 1:

12:09:08 executing program 2:

12:09:08 executing program 4:

12:09:08 executing program 1:

12:09:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0xce]})

12:09:08 executing program 3:

12:09:08 executing program 2:

12:09:08 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:08 executing program 4:

12:09:08 executing program 2:

12:09:08 executing program 3:

12:09:09 executing program 1:

12:09:09 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0xce]})

12:09:09 executing program 4:

12:09:09 executing program 2:

12:09:09 executing program 3:

12:09:09 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:09 executing program 4:

12:09:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7f})

12:09:09 executing program 1:

12:09:09 executing program 3:

12:09:09 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:09 executing program 2:

12:09:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7f})

12:09:09 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0)

12:09:09 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x400000200000)

12:09:09 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:09 executing program 3:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000200), 0x0)

12:09:09 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
pipe(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/netlink\x00')

12:09:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7f})

12:09:10 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:10 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
time(0x0)

[  374.165795] kauditd_printk_skb: 3 callbacks suppressed
[  374.165837] audit: type=1326 audit(1546085350.143:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14799 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  374.262840] audit: type=1326 audit(1546085350.323:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14815 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:10 executing program 3:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
mount(0x0, 0x0, 0x0, 0x0, 0x0)

12:09:10 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:10 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
fdatasync(0xffffffffffffffff)

[  374.484777] audit: type=1326 audit(1546085350.543:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14826 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:10 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

[  374.606433] audit: type=1326 audit(1546085350.573:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14827 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  374.818207] audit: type=1326 audit(1546085350.873:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14799 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:10 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/133, 0x85}, {&(0x7f00000000c0)=""/220, 0xdc}], 0x2)

12:09:10 executing program 2:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
umount2(0x0, 0x0)

12:09:11 executing program 4:
socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r1, &(0x7f0000847f95), 0x0}, 0x18)

[  374.938080] audit: type=1326 audit(1546085350.993:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14839 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:11 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000000, 0x11b, 0x0, &(0x7f00000004c0)="b90703e6681b00000000000000ead5dc57ee41dea43e63a377fb8a977c3f1d1700040000d80648a2ac141411e0000001e1977d486a72d7363417ef6c909047dc183aea9747b34b3cbaa89c94966672915f3af7e55b95a26c7c5f7538c7525f1ff47c696fe08963dc1992dd2b453c5df5b91d4b29e577f425c570e580b2e3bd0711e1cd8361dc24aad4ae0744cda07045b7085c42ff7d3962bd92977165a55792718903b9f3312689afc6104ea8ffcf8f8c51832c46b01214ab6a40e499abbd5ea67b2beaedf604f9fe9449de0cbf000000000000000008e4000000000000ff93822d085b4e5f4d336ed348f213163b587910c8f9876850f6be8b7d9a11d968ce3fe0e7bfdfb527453736ce2c01ffffff7f000000008f59c0434675", 0x0, 0x100}, 0x28)

[  375.051450] audit: type=1326 audit(1546085351.103:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14815 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:11 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000c8d000)={0x0}}, 0x0)

12:09:11 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
chmod(0x0, 0x0)

[  375.223012] audit: type=1326 audit(1546085351.283:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14854 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:11 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
fdatasync(0xffffffffffffffff)

[  375.281291] audit: type=1326 audit(1546085351.323:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14857 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  375.303113] audit: type=1326 audit(1546085351.333:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14826 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:11 executing program 3:
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)

12:09:11 executing program 5:
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:11 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:11 executing program 3:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
lstat(0x0, 0x0)

12:09:11 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, 0x0)

12:09:11 executing program 2:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
fchown(0xffffffffffffffff, 0x0, 0x0)

12:09:12 executing program 1:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
llistxattr(0x0, 0x0, 0x0)

12:09:12 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
rename(0x0, 0x0)

12:09:12 executing program 0:
r0 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000440))
readv(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
accept4(r2, 0x0, &(0x7f0000000940), 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x0, 0x1, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xfffffe47)
sendto$inet(r1, 0x0, 0x0, 0x4, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x4000)

12:09:12 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)

[  376.410692] hrtimer: interrupt took 318636 ns
12:09:12 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:12 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

12:09:12 executing program 3:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
pivot_root(0x0, 0x0)

12:09:12 executing program 2:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
fremovexattr(0xffffffffffffffff, 0x0)

12:09:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0xa, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2})

12:09:13 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
membarrier(0x1, 0x0)

12:09:13 executing program 4:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x1, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))

12:09:13 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
getrusage(0x0, &(0x7f00000001c0))

12:09:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0xfffffe36)
ioctl$TCSETSF(r0, 0x5437, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)

12:09:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:13 executing program 3:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)

12:09:13 executing program 4:

12:09:13 executing program 2:

12:09:14 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:14 executing program 2:

12:09:14 executing program 4:

12:09:14 executing program 2:

12:09:14 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:14 executing program 2:

12:09:14 executing program 0:

12:09:14 executing program 1:

12:09:14 executing program 4:

12:09:14 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:14 executing program 2:

12:09:14 executing program 3:

12:09:14 executing program 0:

12:09:15 executing program 4:

12:09:15 executing program 2:

12:09:15 executing program 3:

12:09:15 executing program 1:

12:09:15 executing program 0:

12:09:15 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:15 executing program 4:

12:09:15 executing program 2:

12:09:15 executing program 1:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000))
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSTAT(r1, &(0x7f00000000c0)={0x51, 0x7d, 0x0, {0x0, 0x4a, 0x0, 0x0, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xb, '/dev/loop#\x00', 0x0, '', 0x1, '*', 0xb, '/dev/loop#\x00'}}, 0x51)
sendfile(r1, r1, &(0x7f0000000140), 0x7fff)

12:09:15 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup2(r0, r1)

12:09:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clone(0xa0140100, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x11)
wait4(0x0, 0x0, 0x0, 0x0)

12:09:15 executing program 4:
mlockall(0x3)
socket(0x0, 0x0, 0x0)
io_setup(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06w=\xea\x8f\xe2\xa4\xe3\x85!M\xeb&')
sendfile(r0, r1, 0x0, 0x40000000009)

12:09:15 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)

12:09:15 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
unlink(&(0x7f00000000c0)='./file0\x00')
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x1)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x10040, 0x0)

[  379.630048] ptrace attach of ""[15032] was attempted by "/root/syz-executor3"[15033]
12:09:15 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:15 executing program 1:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x297ef)
close(r1)

12:09:15 executing program 0:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
close(r0)

12:09:15 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)

12:09:15 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x89c, 0x0, 'client0\x00', 0x0, "fe2d61f2d036d006", "020289f55eb3a6ea2c04cbaca440e25a0dc473cb10570112ccb3ea8d27d5b2a0"})

12:09:16 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:16 executing program 1:
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
close(r0)

12:09:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)

12:09:16 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0)
read$eventfd(r0, &(0x7f0000000100), 0x8)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x68}})

12:09:16 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r0, &(0x7f00000000c0)="0303000007005b0000000000fff55b4202938207d9fb3780398d5375000000007929", 0x22, 0x0, 0x0, 0x0)

12:09:16 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:16 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

12:09:16 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0)

12:09:16 executing program 0:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x5, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000bc0], 0x7, 0x0, &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'lo\x00', 'lapb0\x00', 'ip6_vti0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x3}]}, 0x1a8)

12:09:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)

12:09:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x2)
writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f", 0x1}], 0x1)
dup2(r0, r1)

12:09:16 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:17 executing program 2:
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)

[  380.872806] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt
[  380.876548] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
12:09:17 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

12:09:17 executing program 0:
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000100)=""/165)

[  380.917923] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt
[  380.963457] kauditd_printk_skb: 21 callbacks suppressed
[  380.963486] audit: type=1326 audit(1546085357.023:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15115 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:17 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:17 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getpgid(0x0)

12:09:17 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000340)="c3bc6df5", 0x4, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080), 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000300)=[{0x0}], 0x1)

[  381.708747] audit: type=1326 audit(1546085357.763:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15115 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)

12:09:17 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)

12:09:17 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/4096}, 0x1008, 0x3, 0x0)
msgsnd(r0, &(0x7f0000000040)={0x3}, 0x0, 0x0)

12:09:17 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:17 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x400, 0x6, 0x10000, 0x0, 0x0, 0xfff, 0x640, 0x2, 0x3, 0x5, 0xe2, 0x6, 0x2, 0x1, 0x4, 0x80000000, 0x7fff, 0x77a, 0x7, 0x80, 0x20, 0x4, 0x0, 0x1, 0x1ba7, 0x1, 0x20, 0xfffffffffffffff7, 0x0, 0x200, 0x5, 0x6, 0xfffffffffffffe00, 0x7ff, 0x1, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x4258, 0x8000, 0x6, 0x7, 0x3, 0x6, 0x3}, 0xffffffffffffffff, 0x9, r0, 0x9)
write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08)
r3 = perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x6)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x1, 0x6, 0x10001, 0xff, 0x25, r1, 0x7}, 0x2c)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x101)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x8, 0x101, 0x80000000, 0x1, 0x0, 0xffffffffffffffe1, 0x40000, 0x0, 0x0, 0x3, 0x0, 0x4, 0x65, 0x2, 0x2, 0x0, 0x6, 0x401, 0x0, 0xefe6, 0x3, 0x9, 0xfb9, 0x7, 0x7e7a, 0x0, 0xfcf5, 0x0, 0x4, 0xf2d, 0x0, 0xfffffffffffffc00, 0x1c, 0x0, 0x7, 0x1f, 0x0, 0x80000001, 0x3, @perf_config_ext={0x8, 0xfffffffffffffff8}, 0x0, 0x33, 0x4, 0x0, 0xbd1})
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000140)=r1)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x50, 0xfffffffffffffffe, 0x61, 0x358, 0x0, 0x7, 0x25a2c, 0x8, 0x65, 0x3, 0x55, 0x0, 0x1ff, 0x600000, 0x6df, 0x8001, 0x7f, 0x40, 0x9, 0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x55, 0x0, 0xffffffffffffffe0, 0x7, 0x0, 0x0, 0x0, 0x5e38, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x9202, 0x8, 0x7, 0x2, 0x4, 0x1}, 0x0, 0x4, r3, 0x1)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0xfffffffffffffffd, 0x2, 0x95b, 0x8, r1}, 0x2c)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0)

12:09:17 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x68, 0xc, 0xfffffffffffffbff, 0x3, 0x0, 0x20, 0x1, 0x80000000, 0x4, 0x0, 0x3ff, 0xdfd, 0x4, 0x0, 0xda8, 0xffffffff, 0x80000001, 0x3, 0x36cf000000, 0x1f7e, 0x0, 0xfffffffffffffffe, 0x7, 0xffffffff, 0x376, 0x0, 0x8, 0x80000001, 0x0, 0x3, 0x0, 0xfff, 0x2, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0x8, 0x3, 0x8, 0x5}, r0, 0xb, r0, 0x4)
close(0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000bc0)={<r3=>0x0, r1, 0x0, 0xc, &(0x7f0000000b80)='/group.stat\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000b00)={0x4, 0x70, 0x0, 0x2, 0x4, 0x1fe0000000000000, 0x0, 0x0, 0x90400, 0xf, 0x10001, 0x0, 0x70, 0x0, 0x8, 0x1, 0x400, 0x500000000000, 0x9, 0x8, 0xffffffffffff7fff, 0x0, 0xffff, 0x31, 0x80000000, 0x7ff, 0x7ff, 0x9, 0x5c, 0xff, 0x0, 0x9, 0x0, 0x0, 0x6, 0x3, 0x8, 0x0, 0x0, 0x100000000, 0x0, @perf_config_ext={0x0, 0x5}, 0x40, 0x0, 0x8, 0xf, 0x0, 0x7fff, 0x5}, r3, 0xc, r2, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x100000000000914}, 0x2c)
r5 = gettid()
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x2fa)
recvmsg(r2, &(0x7f0000007380)={&(0x7f00000071c0)=@hci={0x1f, <r6=>0x0}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007240)=""/41, 0x29}, {&(0x7f0000007280)=""/96, 0x60}, {&(0x7f0000007300)=""/22, 0x16}], 0x3}, 0x12042)
bpf$PROG_LOAD(0x5, &(0x7f00000073c0)={0x1f, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000180000007f0000000000000003000000180000003e0f000000000000040000001958f8ff0000000085000000500000009500000000000000180000006f0e0000000000000100000095000000000000009500000000"], 0x0, 0x8726, 0xbf, &(0x7f0000000540)=""/191, 0x40f00, 0x1, [], r6, 0xd}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000000), 0x0}, 0x18)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r7)
perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x6, 0x80, 0xa341, 0x1, 0x0, 0x1ff, 0x0, 0x8, 0x83b, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x8, 0x80000000, 0x0, 0xfffffffffffffffa, 0x0, @perf_bp={0x0}, 0x4881, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x3, 0x70, 0x0, 0x1, 0x5, 0x1, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x4, 0xc232, 0x9a63, 0x0, 0x3, 0x200, 0xf0, 0xfffffffffffffffe, 0x5, 0x6861, 0x101, 0x1, 0x0, 0x6, 0x1, 0x1a, 0xffffffffffffea57, 0x100000000, 0x7, 0x4, 0x9f8, 0x7, 0x3, 0xe36, 0x0, 0x2, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x6}, 0x8000, 0x8, 0x57, 0x0, 0x7fffffff, 0x2, 0x4}, r5, 0x9, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6796, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x54}, @call={0x85, 0x0, 0x0, 0x3f}, @jmp={0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x800, 0xa, 0xc, 0xf, 0x88, 0x4}, @ldst={0x0, 0x0, 0x2, 0xb, 0x7, 0xffffffffffffffc0, 0xffffffffffffffff}, @map={0x18, 0xa, 0x1, 0x0, r4}, @ldst={0x3, 0x3, 0x2, 0x5, 0x3, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x54, &(0x7f00000006c0)=""/84, 0x40f00, 0x1, [], r6}, 0x48)

12:09:18 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)

12:09:18 executing program 3:
open(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
sched_setaffinity(0x0, 0x7, &(0x7f0000000240)=0x8000009)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x8b)
sendto$inet(r1, &(0x7f0000000100), 0x0, 0x404c0c0, 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x0, 0x2ffd}, 0x4)
sendto$inet(r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)

12:09:18 executing program 0:
r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$invalidate(0x15, r0)

12:09:18 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:18 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x68, 0xc, 0xfffffffffffffbff, 0x3, 0x0, 0x20, 0x1, 0x80000000, 0x4, 0x0, 0x3ff, 0xdfd, 0x4, 0x0, 0xda8, 0xffffffff, 0x80000001, 0x3, 0x36cf000000, 0x1f7e, 0x0, 0xfffffffffffffffe, 0x7, 0xffffffff, 0x376, 0x0, 0x8, 0x80000001, 0x0, 0x3, 0x0, 0xfff, 0x2, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0x8, 0x3, 0x8, 0x5}, r0, 0xb, r0, 0x4)
close(0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000bc0)={<r3=>0x0, r1, 0x0, 0xc, &(0x7f0000000b80)='/group.stat\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000b00)={0x4, 0x70, 0x0, 0x2, 0x4, 0x1fe0000000000000, 0x0, 0x0, 0x90400, 0xf, 0x10001, 0x0, 0x70, 0x0, 0x8, 0x1, 0x400, 0x500000000000, 0x9, 0x8, 0xffffffffffff7fff, 0x0, 0xffff, 0x31, 0x80000000, 0x7ff, 0x7ff, 0x9, 0x5c, 0xff, 0x0, 0x9, 0x0, 0x0, 0x6, 0x3, 0x8, 0x0, 0x0, 0x100000000, 0x0, @perf_config_ext={0x0, 0x5}, 0x40, 0x0, 0x8, 0xf, 0x0, 0x7fff, 0x5}, r3, 0xc, r2, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x100000000000914}, 0x2c)
r5 = gettid()
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x2fa)
recvmsg(r2, &(0x7f0000007380)={&(0x7f00000071c0)=@hci={0x1f, <r6=>0x0}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007240)=""/41, 0x29}, {&(0x7f0000007280)=""/96, 0x60}, {&(0x7f0000007300)=""/22, 0x16}], 0x3}, 0x12042)
bpf$PROG_LOAD(0x5, &(0x7f00000073c0)={0x1f, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000180000007f0000000000000003000000180000003e0f000000000000040000001958f8ff0000000085000000500000009500000000000000180000006f0e0000000000000100000095000000000000009500000000"], 0x0, 0x8726, 0xbf, &(0x7f0000000540)=""/191, 0x40f00, 0x1, [], r6, 0xd}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000000), 0x0}, 0x18)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r7)
perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x6, 0x80, 0xa341, 0x1, 0x0, 0x1ff, 0x0, 0x8, 0x83b, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x8, 0x80000000, 0x0, 0xfffffffffffffffa, 0x0, @perf_bp={0x0}, 0x4881, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x3, 0x70, 0x0, 0x1, 0x5, 0x1, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x4, 0xc232, 0x9a63, 0x0, 0x3, 0x200, 0xf0, 0xfffffffffffffffe, 0x5, 0x6861, 0x101, 0x1, 0x0, 0x6, 0x1, 0x1a, 0xffffffffffffea57, 0x100000000, 0x7, 0x4, 0x9f8, 0x7, 0x3, 0xe36, 0x0, 0x2, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x6}, 0x8000, 0x8, 0x57, 0x0, 0x7fffffff, 0x2, 0x4}, r5, 0x9, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6796, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x54}, @call={0x85, 0x0, 0x0, 0x3f}, @jmp={0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x800, 0xa, 0xc, 0xf, 0x88, 0x4}, @ldst={0x0, 0x0, 0x2, 0xb, 0x7, 0xffffffffffffffc0, 0xffffffffffffffff}, @map={0x18, 0xa, 0x1, 0x0, r4}, @ldst={0x3, 0x3, 0x2, 0x5, 0x3, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x54, &(0x7f00000006c0)=""/84, 0x40f00, 0x1, [], r6}, 0x48)

12:09:18 executing program 0:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040))
r0 = syz_open_procfs(0x0, 0xfffffffffffffffd)
getdents64(r0, &(0x7f0000000340)=""/57, 0x252)

12:09:18 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:18 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00')
lseek(r0, 0x0, 0x0)

12:09:18 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')

12:09:18 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x100}, 0x1c)

12:09:18 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RREMOVE(r2, &(0x7f0000000280)={0x224}, 0x43c5)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
fdatasync(r2)
ftruncate(r3, 0x8200)
write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

12:09:18 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:18 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x8000000000000003, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000302ffe7be0000000000ffffe1ff0000"], 0x14}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0)

12:09:18 executing program 0:
syz_genetlink_get_family_id$ipvs(0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x36ec00000000000)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200))
seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x0, 0x9}, {0x6}]})
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0)

12:09:18 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000013940)=[{&(0x7f0000012800)=""/4096, 0x1000}], 0x1}}], 0x24e, 0x0, 0x0)

12:09:18 executing program 4:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2000000010)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x39})
tkill(r0, 0x12)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  382.841754] ptrace attach of "/root/syz-executor4"[15209] was attempted by "/root/syz-executor4"[15210]
12:09:19 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000001c0), 0x0, 0x3}, 0x20)

12:09:19 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x18)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c1f023c126285719070")

12:09:19 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b4090000083c0000000000000000000000ffff0101000000000000000000000001888690780009040060b680fa0000400000000000000000000000ffffffffffff00000000000000000000ffffcdb2ce72"], 0x0)

12:09:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f00000001c0), 0x12)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x10076)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r2, 0x40})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x4880)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070")

12:09:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

12:09:19 executing program 0:
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x103e, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x20082, 0x0)

12:09:19 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:19 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x18)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c1f023c126285719070")

12:09:19 executing program 2:

12:09:20 executing program 3:

12:09:20 executing program 1:

12:09:20 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:20 executing program 2:

12:09:20 executing program 0:

12:09:20 executing program 2:

12:09:20 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, 0x0)

12:09:20 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:20 executing program 3:

12:09:20 executing program 0:

12:09:20 executing program 4:

12:09:20 executing program 2:

12:09:20 executing program 3:

12:09:20 executing program 0:

12:09:20 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:20 executing program 4:

12:09:20 executing program 1:

12:09:20 executing program 3:

12:09:20 executing program 2:

12:09:20 executing program 0:

12:09:20 executing program 4:

12:09:21 executing program 3:

12:09:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:21 executing program 1:

12:09:21 executing program 2:

12:09:21 executing program 0:

12:09:21 executing program 4:

12:09:21 executing program 3:

12:09:21 executing program 0:

12:09:21 executing program 1:

12:09:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:21 executing program 2:

12:09:21 executing program 4:

12:09:21 executing program 0:

12:09:21 executing program 1:

12:09:21 executing program 3:

12:09:21 executing program 4:

12:09:21 executing program 0:

12:09:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:21 executing program 2:

12:09:22 executing program 4:

12:09:22 executing program 3:

12:09:22 executing program 0:

12:09:22 executing program 1:

12:09:22 executing program 4:

12:09:22 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10)

12:09:22 executing program 2:

12:09:22 executing program 0:

12:09:22 executing program 3:

12:09:22 executing program 1:

12:09:22 executing program 4:

12:09:22 executing program 2:

12:09:22 executing program 0:

12:09:22 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000100))

12:09:22 executing program 1:

12:09:22 executing program 3:

12:09:22 executing program 2:

12:09:22 executing program 4:

12:09:22 executing program 0:

12:09:22 executing program 3:

12:09:22 executing program 1:

12:09:22 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x804e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000077000/0x4000)=nil, 0x4000}, 0x0)

12:09:23 executing program 0:

12:09:23 executing program 2:

12:09:23 executing program 3:

12:09:23 executing program 4:

12:09:23 executing program 1:

12:09:23 executing program 5:

12:09:23 executing program 0:

12:09:23 executing program 2:

12:09:23 executing program 3:

12:09:23 executing program 4:

12:09:23 executing program 1:

12:09:23 executing program 5:

12:09:23 executing program 0:
capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
write$FUSE_LK(r1, &(0x7f0000000040)={0x28}, 0x28)

12:09:23 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
timer_delete(0x0)

12:09:23 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
setitimer(0x0, &(0x7f0000000100)={{}, {r0}}, 0x0)
alarm(0x0)

12:09:23 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

[  387.728289] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use)
12:09:23 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')

12:09:23 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "46bf915659fda3cd554e6daf3b60af4943b9b119f9bb1667cb2b16e2784c1fc1d1a5c25d1679fa9fb828aaa52e94dfe7ac88c200", "22de3ded50f4d957495c5dd9f29cf50044cc82b46511de2376b3801d483a2bad"})

12:09:24 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0xe93}, 0x10)

12:09:24 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

12:09:24 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)

[  388.102311] audit: type=1326 audit(1546085364.153:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15440 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:24 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="4d8d8fe636f6cac49c53c4e73fff", 0x0, 0x8d18}, 0x28)

12:09:24 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')

12:09:24 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)

[  388.227155] audit: type=1326 audit(1546085364.243:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15453 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:24 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:24 executing program 4:

12:09:24 executing program 4:

12:09:24 executing program 2:

[  388.797278] audit: type=1326 audit(1546085364.853:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15440 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:24 executing program 1:

12:09:24 executing program 0:

12:09:24 executing program 4:

[  388.897031] audit: type=1326 audit(1546085364.953:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15453 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:09:25 executing program 5:

12:09:25 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:25 executing program 2:

12:09:25 executing program 0:

12:09:25 executing program 4:

12:09:25 executing program 1:

12:09:25 executing program 2:

12:09:25 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unlink(&(0x7f0000000180)='./file0\x00')
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)

12:09:25 executing program 5:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
unlink(&(0x7f00000000c0)='./file0\x00')
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000026ff8)='./file0\x00', 0x0, 0x1000, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

12:09:25 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0)

12:09:25 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
unlink(&(0x7f0000000180)='./file0\x00')
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)

12:09:25 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x2e4, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009)
pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff)

12:09:25 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x61)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffff8})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x800, 0x0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r3, 0x0)
connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00')
sendfile(r2, r4, 0x0, 0x800000bf)

12:09:26 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140))

12:09:26 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2000000802, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000380), 0x6)

12:09:26 executing program 1:
r0 = add_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$search(0xa, 0x0, &(0x7f0000000340)='dns_resolver\x00', 0x0, r0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', <r2=>0x0})
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
lremovexattr(0x0, &(0x7f00000005c0)=@known='com.apple.FinderInfo\x00')
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0))
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000600))
getrandom(0x0, 0x0, 0x0)

12:09:26 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2000000802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000240)={0xb, 'syz0\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x1cK\xb4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "95"}, 0x119)
write$UHID_INPUT2(r0, &(0x7f0000000380), 0x6)

12:09:26 executing program 3:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x2)
dup3(r1, r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

12:09:26 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00')
readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000012d)

12:09:26 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000f59ffc), 0x4)

12:09:26 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

[  390.447495] hid-generic 0000:0000:0000.0001: item fetching failed at offset 127556737
[  390.455960] hid-generic: probe of 0000:0000:0000.0001 failed with error -22
[  390.474562] hid-generic 0000:0000:0000.0002: item fetching failed at offset 128243793
[  390.482959] hid-generic: probe of 0000:0000:0000.0002 failed with error -22
[  390.624321] sock: process `syz-executor0' is using obsolete setsockopt SO_BSDCOMPAT
12:09:26 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

12:09:26 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x8c\x00b\x8fM\xa7y\x10\x8d7\xbf\xc0\xe9m\x12\xf4\x19\xcb=\xc5,\x02V\xb1\vF\xb8},\x8f\t\x8b\xa2\x0f\xc7\x06=.\xb8c\xca4!\x9b=~\x14\xa0\xb4\xe8\xfd\x8c\x9a\xcaV\xa0A\x1be\x8e\x05a\x88,\x19\x8d7sS\x0f\xc2\xc9de\x82\xcc\xbd\xc9\x99\xfa\x80\xbc\xe3Q\x05#^R\x8eY\x80Z(\xbf\xe1\'\xff\xe5NU\xc9\xf9|\v\xa4\xae\xff\xf4\xd0\xf1\t\x8c\x8f\x03p\x1f\xca\xb98\x1a\xc1\xcej\xc8\xcbV\x9e\xa2\xea\xc0\xc6\x83)K\x8e\xa8P\x13,]Oo\x03l\xa7\xfdc\x97\xe6\xe4\xfbCj}ig|$\xbc#2\xf5\x19\xe9\xd1\xc9\x92=h\x92\xee\x06\x16Z\xab\x9f\xde\x8b', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
sendfile(r0, r0, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x800)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000140)={'bcsf0\x00', {0x2, 0x4e20, @remote}})
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r2)

12:09:26 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x06\x00C\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00')
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0xfff, 0x2, 0x0, 0x1, [{}]})

12:09:26 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x800000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(r0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'bridge_slave_0\x00'}, 0x18)

[  390.960735] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
12:09:27 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x2, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x4004, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"])
bind$inet(r1, &(0x7f0000b9aff0)={0x2, 0x4e22}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
modify_ldt$write(0x1, &(0x7f0000000340)={0x3, 0x0, 0xfbb662e7646498a6, 0x1, 0x403, 0x6, 0x468e, 0x100000000, 0x3, 0x6}, 0x10)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5)
gettid()
write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0xaa8}}, 0x18)
getdents(r0, &(0x7f00000008c0)=""/135, 0x87)
write$FUSE_ATTR(r0, &(0x7f0000000800)={0x78, 0x0, 0x8, {0xb0d, 0x8000, 0x0, {0x0, 0x7, 0xfee1, 0x610, 0x5, 0x1, 0x7, 0x4, 0x5, 0x56, 0x25, r2, r3, 0x1, 0x1f}}}, 0x78)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r6 = memfd_create(&(0x7f0000000280)='((({trusted\x00', 0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000580)={0x6, {{0xa, 0x4e24, 0x6, @ipv4={[], [], @broadcast}}}, {{0xa, 0x4e20, 0x100000001, @remote, 0x9}}}, 0x108)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000880))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
socket(0x11, 0x5, 0x1)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e20, 0x5, @loopback, 0x8}, {0xa, 0x4e24, 0x2, @loopback, 0x899}, 0x3, [0x0, 0x6, 0x3, 0x80000001, 0x4, 0x3ff, 0xffffffff00000000, 0xfffffffffffffe00]}, 0x5c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', <r8=>0x0})
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="00022cbd7000fedbdf251000000014000300080004003d00000008000400060000003000030014000600000000000000000000000000000000010800010000000000080001000300000008000400000200000801000003000000080004000900000028000100080001000a00000014000300e00000010000000000000000000000000800080001010000"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000040)=r8)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2})

[  391.057672] print_req_error: I/O error, dev loop5, sector 1024
12:09:27 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
r0 = creat(0x0, 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSTAT(r2, &(0x7f00000000c0)={0x51, 0x7d, 0x0, {0x0, 0x4a, 0x0, 0x0, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xb, '/dev/loop#\x00', 0x0, '', 0x1, '*', 0xb, '/dev/loop#\x00'}}, 0x51)
sendfile(r2, r2, &(0x7f0000000140), 0x7fff)

12:09:27 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000240)="2504f2ff1f002c6176c5f3343dbe", 0x0, 0xf0ffff00000855}, 0x28)

12:09:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000))

12:09:27 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000001100)='comm\x00')
readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000012d)

12:09:27 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00')
readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000012d)

12:09:27 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
tkill(r0, 0x1000000000014)

12:09:27 executing program 4:
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000008c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)="80", 0x1}], 0x1}, 0x40)

12:09:27 executing program 2:
r0 = gettid()
waitid(0x1, r0, 0x0, 0x8, 0x0)

12:09:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)

12:09:27 executing program 0:
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
open(0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RSTAT(r0, &(0x7f00000000c0)={0x51, 0x7d, 0x0, {0x0, 0x4a, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xb, '/dev/loop#\x00', 0x0, '', 0x1, '*', 0xb, '/dev/loop#\x00'}}, 0x51)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
sendfile(r0, r0, &(0x7f0000000140), 0x7fff)

12:09:27 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x50, 0x3, 0x400000bff}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0}, 0x10)

12:09:27 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b)

12:09:27 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

12:09:28 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}, 0x0)
socket$inet(0x2, 0x0, 0x0)

12:09:28 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsync(r0)

12:09:28 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0xc)
write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f)
close(r1)
write(0xffffffffffffffff, 0x0, 0x0)

12:09:28 executing program 2:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0)

[  392.327786] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  392.394553] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
12:09:30 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
tkill(r0, 0x1000000000014)

12:09:30 executing program 1:
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

12:09:30 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(r0, r0, 0x0)

12:09:30 executing program 5:

12:09:30 executing program 2:

12:09:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[  394.494006] audit: type=1326 audit(1546085370.553:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15692 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:30 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {r2}], 0x7, 0x0)

12:09:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x30811001}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r1, 0x9)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

12:09:30 executing program 5:
r0 = socket$inet6(0xa, 0x8000000003, 0x4000000000001)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000006cfc7f000000000052b01a263fcb1e149befa642b7e60f1da3fad3ced847882908cc3421d3a971e5a2fee9d4c0e63e5239d5db9455faf3a5656cd76e797949d9389ac45a05496882820cc78a0d6a6e3d436266b3fc0480b17888d797f2d189806af0bf4c0fcd8ab311829205144699cc09564132"], 0x7c}}, 0x0)
connect$inet6(r0, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8)
sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0)

12:09:30 executing program 1:

12:09:30 executing program 0:

12:09:30 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {r2}], 0x7, 0x0)

[  395.265593] audit: type=1326 audit(1546085371.323:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15692 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:33 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
tkill(r0, 0x1000000000014)

12:09:33 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {r2}], 0x7, 0x0)

12:09:33 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(r0, r0, 0x0)

12:09:33 executing program 0:

12:09:33 executing program 1:

12:09:33 executing program 5:

12:09:33 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {r2}], 0x7, 0x0)

[  397.566189] audit: type=1326 audit(1546085373.623:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15740 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:33 executing program 1:

12:09:33 executing program 5:

12:09:33 executing program 0:

12:09:33 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:33 executing program 1:

12:09:36 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:36 executing program 5:

12:09:36 executing program 0:

12:09:36 executing program 1:

12:09:36 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:36 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(r0, r0, 0x0)

12:09:36 executing program 1:

[  400.676048] audit: type=1326 audit(1546085376.733:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15770 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:36 executing program 0:

12:09:36 executing program 5:

12:09:36 executing program 1:

12:09:36 executing program 0:

12:09:37 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:37 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:37 executing program 1:

12:09:37 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

12:09:37 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x10000000000011, &(0x7f0000534000), &(0x7f0000000000)=0x4)

12:09:37 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:37 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(r0, r0, 0x0)

12:09:37 executing program 0:
clone(0x13102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1e)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x5c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)

12:09:37 executing program 5:
clone(0x13102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1e)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x5c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

12:09:37 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = memfd_create(&(0x7f0000000100)='\x90\x99\xf7:\x1cz\x8d\a\x0f\xc9\x11\x8dTuf;.\xd1o\x00\b\xf4A\xb0\x1f\xd9#\xc6@\xa2\x1cf\x19\xec\xb5\xcfwKJdT\x9dW\x96*\x83\x8f\x8e\xdd\x995`\xa2\xf8H\xbcH:\x9d\x16\xf6\x02\xd4s\x9a\xa4[=Y0\xd1\x86R2\xaf\xa7\x12Is\x80\xf8s1s\xc5\x85F\xfb\"Jm\xd2\xe6R\xc5M\xc2Up\xfc\xe3\xa5\x9c\x1e\xe3S\xa2\xdc\xddq\x9e\xdc\x15u,\xeen\xa2\x1a$\x18m\x1b\xa2;\vaq\x9b\x96\x81_\\\xbb\xb9', 0x0)
write(r1, &(0x7f0000000540)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

12:09:37 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:37 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

[  401.569196] ptrace attach of "/root/syz-executor5"[15817] was attempted by "/root/syz-executor5"[15818]
[  401.591435] ptrace attach of "/root/syz-executor0"[15822] was attempted by "/root/syz-executor0"[15826]
12:09:37 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40000000004, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000500)=@can={{}, 0x0, 0x0, 0x0, 0x0, "4cb1bb826aaeade1"}, 0x10}}, 0x0)

12:09:37 executing program 5:

[  401.620802] audit: type=1326 audit(1546085377.673:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15827 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:37 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:37 executing program 0:

12:09:37 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r1, 0x2)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:37 executing program 1:

12:09:38 executing program 4:
r0 = gettid()
tgkill(r0, r0, 0x0)

12:09:38 executing program 5:

12:09:38 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:38 executing program 0:

12:09:38 executing program 1:

12:09:38 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000080)=""/4096, 0xfe98, 0x0)

12:09:38 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
semop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1)
semop(0x0, &(0x7f0000001180)=[{0x0, 0x7, 0x1000}], 0x1)

12:09:38 executing program 1:
mknod(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)

12:09:38 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:38 executing program 4:
r0 = gettid()
tgkill(r0, r0, 0x0)

12:09:38 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
dup3(0xffffffffffffffff, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {0xffffffffffffffff, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:38 executing program 5:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unlink(&(0x7f0000000180)='./file0\x00')
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
close(r0)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)

12:09:38 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = gettid()
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000004c0), 0x0, 0x1}, 0x20)
r5 = getpid()
write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYRESOCT=r5], 0xfffffffffffffd31)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6)
openat$cgroup_ro(r1, &(0x7f0000000700)='cpuaccp.\xb4\x00W\t\x00\x00\x00e+\t\xfd?\x1d\xbc\xe8\x0e\xa2\xd09\xe8\x1f\xc1E\xa5\x97_sys\x00\xae\x10,\tz\x1c\x9a\x18\xccI\x85\xe3>\x7f\xe7\xe2E\v\x13', 0x0, 0x0)
r6 = socket$kcm(0x10, 0x1000000000000002, 0x0)
socketpair(0x1b, 0x80000, 0xfffffffffffffeff, &(0x7f0000000240))
perf_event_open(&(0x7f0000000580)={0x4, 0x70, 0x6, 0x2, 0x6, 0xe108, 0x0, 0x80, 0x0, 0x1, 0x1, 0x3ff, 0x7ff, 0xd7, 0xbd3, 0x1000, 0x3, 0x1, 0x4, 0x1, 0xf80, 0x0, 0x7ff, 0x6, 0x3, 0x2, 0x4138, 0x7fffffff, 0x77, 0xfffffffffffffffe, 0xef, 0x480, 0x1ff, 0x6, 0x3f, 0x7, 0x412, 0x239f, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000540)}, 0x8005, 0x0, 0x10001, 0x3, 0x2, 0x8000, 0x1}, r5, 0xe, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000640)={0x3, 0x70, 0x6, 0x5, 0x1, 0x8, 0x0, 0x1, 0x1, 0x4, 0x3, 0xfffffffffffffffc, 0x8, 0x8, 0x6, 0x5, 0x7ce1, 0x8, 0xff, 0x9, 0x7fffffff, 0x5, 0x3, 0x7, 0x3, 0x5, 0x1, 0x200000000000, 0x81, 0x4, 0x2, 0x200, 0x40, 0x1, 0x7fffffff, 0x800, 0xff, 0x2268, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd20e}, 0x0, 0x7, 0x200, 0x1, 0x400, 0x3, 0xfffffffffffffff7}, r4, 0x5, r0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, &(0x7f0000000300)=""/199, 0xc7}, 0x0)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
sendmsg$kcm(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)}], 0x1}, 0x8000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r3, 0x10, &(0x7f0000000100)={&(0x7f0000000740)=""/4096, 0x1000, <r7=>0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r7, 0x4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4)

12:09:38 executing program 1:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0x600000, 0x297ef)

12:09:39 executing program 4:
r0 = gettid()
tgkill(r0, r0, 0x0)

12:09:39 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCEXCL(r0, 0x540c)

12:09:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {0xffffffffffffffff, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:39 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x3)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0))
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc)
ptrace$cont(0x7, 0x0, 0xb590, 0x7)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)

12:09:39 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(0x0, 0x0, 0x0)

12:09:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {0xffffffffffffffff, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

[  403.435684] audit: type=1326 audit(1546085379.493:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15910 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:39 executing program 2:
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:39 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:39 executing program 2:
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:40 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080))

12:09:40 executing program 0:
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00')
rmdir(&(0x7f0000000000)='./file1\x00')

12:09:40 executing program 2:
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:40 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(0x0, 0x0, 0x0)

12:09:40 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x2e4, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
tgkill(r0, r0, 0x0)

[  404.438124] audit: type=1326 audit(1546085380.493:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15961 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x2e4, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x1})

12:09:40 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:40 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20)

12:09:40 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_team\x00'}, 0x18)
ioctl(r0, 0x800000000008982, &(0x7f0000000080))

12:09:40 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:40 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
poll(&(0x7f0000000100)=[{}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(0xffffffffffffffff, 0x2)
dup3(r1, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:41 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffe75)

12:09:41 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:41 executing program 0:
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00')
rmdir(&(0x7f0000000000)='./file1\x00')

12:09:41 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140), 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002000010000000000ffff000002"], 0x1}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00\x00\x00\x00 \x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x352}}, 0x0)

12:09:41 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:41 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(0x0, 0x0, 0x0)

[  405.422531] audit: type=1326 audit(1546085381.473:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16004 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
[  405.440173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
12:09:41 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

[  405.535051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
12:09:41 executing program 1:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x2107)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000080))

12:09:41 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZeh\x7f\xd6\"\x10\xc0 jt\xe33&S\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00+\xa8\xa9^h\xa1\xc3=8\xfd\xfd4O\x96ug\x15\x022\x8c3a\xecK\xbfz{\x11\xc6eD3\xa4\x92\xa7t~\r\x1e#\x90\xf4\x0f\xef\xf1\x11\x8bC\xf0t\x8f\xa9\x16\xb6v\xce\xb5\xa4k\x92\t\x152\xfe\xee/\xea\xdf\xa9\xfbqI\xa0')
fstat(r0, &(0x7f0000008f80))

12:09:41 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:41 executing program 3:
r0 = gettid()
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:42 executing program 1:

12:09:42 executing program 5:

12:09:42 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/245, 0xf5}, {0x0}, {0x0}], 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

12:09:42 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:42 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
tgkill(r0, r0, 0x0)

12:09:42 executing program 5:

12:09:42 executing program 1:
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180))
ptrace(0x10, r0)
ptrace(0x19, r0)

12:09:42 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x80017, 0x0, 0x0})

12:09:42 executing program 1:

12:09:42 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
tgkill(r0, r0, 0x0)

12:09:42 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:45 executing program 3:
r0 = gettid()
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:45 executing program 1:

12:09:45 executing program 5:

12:09:45 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
tgkill(r0, r0, 0x0)

12:09:45 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:45 executing program 0:

12:09:45 executing program 5:

12:09:45 executing program 0:

12:09:45 executing program 1:

12:09:45 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:45 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(0x0, r0, 0x0)

[  409.321006] audit: type=1326 audit(1546085385.373:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16103 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:45 executing program 1:

12:09:48 executing program 3:
r0 = gettid()
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:48 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:48 executing program 5:

12:09:48 executing program 0:

12:09:48 executing program 1:

12:09:48 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(0x0, r0, 0x0)

[  412.204680] audit: type=1326 audit(1546085388.263:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16117 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:48 executing program 5:

12:09:48 executing program 0:

12:09:48 executing program 1:

12:09:48 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c12")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:48 executing program 1:

12:09:48 executing program 5:

12:09:51 executing program 3:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x2)
dup3(r1, r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000014)

12:09:51 executing program 0:

12:09:51 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c12")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:51 executing program 1:

12:09:51 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x2, 0x28021)
accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e)

12:09:51 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(0x0, r0, 0x0)

12:09:51 executing program 1:
r0 = syz_open_procfs(0x0, 0xfffffffffffffffd)
fstat(r0, &(0x7f0000000080))

[  415.348652] audit: type=1326 audit(1546085391.403:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16149 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:51 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240), 0x0}, 0x20)

12:09:51 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c12")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:51 executing program 1:
capget(&(0x7f0000000440), 0x0)

12:09:51 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
read(r0, &(0x7f0000000000)=""/190, 0xbe)
read(r0, &(0x7f00000003c0)=""/173, 0xad)

12:09:51 executing program 5:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000740))
r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

12:09:52 executing program 3:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:52 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c12628571")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:52 executing program 1:

12:09:52 executing program 0:

12:09:52 executing program 5:

12:09:52 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(r0, 0x0, 0x0)

[  416.326826] audit: type=1326 audit(1546085392.383:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16192 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:52 executing program 0:

12:09:52 executing program 1:

12:09:52 executing program 5:

12:09:52 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c12628571")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:52 executing program 0:

12:09:52 executing program 1:

12:09:52 executing program 3:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:52 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c12628571")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:52 executing program 5:

12:09:52 executing program 1:

12:09:52 executing program 0:

12:09:53 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(r0, 0x0, 0x0)

12:09:53 executing program 3:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:53 executing program 5:

12:09:53 executing program 1:

12:09:53 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c1262857190")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:53 executing program 0:

12:09:53 executing program 1:

12:09:53 executing program 5:

12:09:53 executing program 0:

[  417.384135] audit: type=1326 audit(1546085393.433:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16243 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:53 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c1262857190")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:53 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:53 executing program 1:

12:09:54 executing program 4:
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
tgkill(r0, 0x0, 0x0)

12:09:54 executing program 5:

12:09:54 executing program 0:

12:09:54 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c1262857190")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}, {}], 0x7, 0x0)

12:09:54 executing program 1:

[  418.339306] audit: type=1326 audit(1546085394.393:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16274 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:09:54 executing program 0:

12:09:54 executing program 5:

12:09:54 executing program 1:

12:09:54 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(0x0, 0x0, 0x0)

12:09:54 executing program 0:

12:09:56 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:56 executing program 1:

12:09:56 executing program 5:

12:09:56 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(0x0, 0x0, 0x0)

12:09:56 executing program 0:

12:09:56 executing program 4:

12:09:56 executing program 0:

12:09:56 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(0x0, 0x0, 0x0)

12:09:56 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xe, 0x4, 0x4000000004, 0xa350, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

12:09:57 executing program 1:
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg(r0, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}, 0x2000c4ff)
recvmsg(r0, &(0x7f0000009e80)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x50)

12:09:57 executing program 4:
r0 = socket$kcm(0xa, 0x3, 0x11)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xfd95, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000080)=@un=@abs, 0x80, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8906, &(0x7f0000000000))

12:09:57 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x10}], 0x6, 0x0)

12:09:59 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:09:59 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x1, 0x0, 0x0, 0x5, 0x0, 0x5, 0x10804, 0x0, 0x0, 0x8696, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfdef)

12:09:59 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0xc}, 0x80, 0x0}, 0x20004040)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000180)={'ip6gretap0\x00', @random="01003a1e2410"})

12:09:59 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000680)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:')

12:09:59 executing program 1:

12:09:59 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}, {}], 0x5, 0x0)

12:10:00 executing program 1:

12:10:00 executing program 5:

12:10:00 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2}], 0x4, 0x0)

12:10:00 executing program 1:

12:10:00 executing program 0:

12:10:00 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x180004, 0xcc)

12:10:03 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:03 executing program 1:

12:10:03 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {0xffffffffffffffff, 0x200}], 0x3, 0x0)

12:10:03 executing program 5:

12:10:03 executing program 0:

12:10:03 executing program 4:

12:10:03 executing program 4:

12:10:03 executing program 1:

12:10:03 executing program 5:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000280)='./file1\x00')

12:10:03 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}], 0x2, 0x0)

12:10:03 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x100000b5, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000100))
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x0, 0x41, 0x8a77})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', 0x0, 0x0, 0x1)
preadv(r0, 0x0, 0x0, 0x0)

12:10:03 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

12:10:06 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c)
recvmmsg(r1, &(0x7f0000003b40)=[{{0x0, 0x4500000000000000, 0x0}}], 0x300, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0)
shutdown(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000080)=0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0xff})

12:10:06 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}], 0x2, 0x0)

12:10:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280), 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f00000000c0))

12:10:06 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0)

12:10:06 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r0, &(0x7f0000000980)=[{&(0x7f0000000780)=""/118, 0x76}, {&(0x7f0000000880)=""/196, 0xc4}], 0x2, 0x0)

12:10:06 executing program 4:
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f00000032c0)=ANY=[@ANYBLOB="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"]})
r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x2, 0x28021)
write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e)

12:10:06 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000803, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)

12:10:06 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}], 0x2, 0x0)

12:10:06 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000880)=""/246)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)

12:10:06 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)

12:10:06 executing program 2:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {r0, 0x4010}, {}], 0x3, 0x0)

12:10:09 executing program 4:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90)

12:10:09 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:09 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {}], 0x2, 0x0)

12:10:09 executing program 0:
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7f, 0x4)
listen(r0, 0x0)

12:10:09 executing program 1:
mknod(&(0x7f0000000080)='./bus\x00', 0x80008005, 0x2d94)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000100)=""/41, 0xfe9a}, {&(0x7f0000001180)=""/149, 0x95}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/203, 0xcb}], 0x6, 0x0)

12:10:09 executing program 5:
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

12:10:09 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {}], 0x2, 0x0)

12:10:09 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0)

12:10:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
dup2(r0, r1)

12:10:09 executing program 1:
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0x4, 0x4, &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000380)={0x0, 0x1c9c380})

12:10:09 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f00000023c0)=ANY=[@ANYBLOB], 0x0}, 0x20)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002380)={&(0x7f0000002340)='./file0\x00'}, 0x10)

12:10:09 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x22}, {}], 0x2, 0x0)

12:10:09 executing program 5:
r0 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xe, &(0x7f00000001c0), 0xb66e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x80002, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000040)='%d')
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x50, &(0x7f0000000400)}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x1800000000000006, 0xe, 0x0, &(0x7f0000000000)="b90703e69ebf08bb64879e100800", 0x0, 0x69}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x8, 0x5, 0x6, 0xf69b, 0x1, 0xffffffffffffffff, 0x3}, 0x2c)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000004c0))
socket$kcm(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000240), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f0000000280)="9c6e2065769413cfbfa37bc10dc050c91bba3f5e50f917ab5328f3b81eb5dc7d2a529164e468c1b567443802b65f71263bd4784523864ccf6c37232910b3a8958eba33deb8a1b5e316b996ea2fc3830fbda06f661e97a532517a35fa785b9bf33780b161ff548e51995f9ee2a7f7b1344706fdc41f2a88701d9be556d1fd78ee239dfd553f6bfe9f7f94926e5025ab31ecdd0f305f8eba"}, 0x10)

[  433.539035] sock: process `syz-executor5' is using obsolete setsockopt SO_BSDCOMPAT
12:10:12 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

12:10:12 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:12 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x200000000000, 0x0, &(0x7f0000000440))
r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x40001)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x22)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000002c0)={0x9, 0x4, 0x4, 0x2})
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000380)=0x5)
clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=<r4=>0x0)
prctl$PR_SET_PTRACER(0x59616d61, r4)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

12:10:12 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf6<D;?\xc5\x04\x00\x06\xbb\\\xd4\xbd|ss\xb3\xd4\xd4p\xa0\xcbV\x17\xaa\xdb\xfbd\xc5\xe4\x98<%\xd0$\xa9\xf3\xc4\x89\xccC\x8f\x9em\xe1cdg+\xf7\n\xd3\xbc\'\xc9$8OU\x86\xd4\xa5\x1cd \xa4\xe3V\xe4\xe5\xff~(N\xe6\x9a\x86\xf6rdf}$\xb6\xf6P.\xb3\x80\x10M&/\x88\x9f9\x01\x01\xcc\xaf\xf8\x05\x81f\x03\xf6[\xa3\t\x00\x00\x00\x00\x00\x00\x00J\x80\x00N\x16\xb7\f\x96I\xa2\xf9\xf6\x90\x0f\xc7rg\xa046\xba\x91\xa7\xf5\ft\x7fX#n_\xa3\\\xe7K\xb8\xdaW\xaeJ\xca\xd3\xae\xc3f\x0e\xa6g\x1d\xa9\xf5^\x82\x11\xdf\xc5\xa1{\x8d;\x18e\xe9}\xa6\x94\xc8\x8fI \xf7r\xf1\x96\xbd\xf2\x99\xfc\v#=`eBq\xce\x98\x10\x15')
lseek(r0, 0x0, 0x4)

12:10:12 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000300), 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

12:10:12 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @random="29619f509f71"}, 0x48, {0x2, 0x0, @loopback}, 'bridge_slave_0\x00'})

[  436.244232] audit: type=1326 audit(1546085412.303:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16506 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:12 executing program 1:
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000280)=[@enter_looper], 0x48, 0x0, &(0x7f0000000440)="f639a64a0f0fc76ed5f2946bb5b89defc8a0f965f154d64a0763dbbbced9873a96d954dd982d6db96ff55680987a3d9e107637af4a1e93ec0e8b0200004c0a6c62bedd89574c9e4e"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

12:10:12 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

12:10:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040))

[  436.408397] binder: 16524 RLIMIT_NICE not set
12:10:12 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

12:10:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000))

12:10:12 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
semget$private(0x0, 0x7, 0x0)

12:10:12 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x0)

[  436.767198] audit: type=1326 audit(1546085412.823:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16541 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  437.017394] audit: type=1326 audit(1546085413.073:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16506 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:13 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(0x0, 0x0, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:13 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)

12:10:13 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x0)

12:10:13 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000140)=0x1e)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$input_event(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0)

12:10:13 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000300)=""/245, 0xf5)
getdents(r0, 0x0, 0x0)

[  437.204048] binder_alloc: binder_alloc_mmap_handler: 16523 20001000-20004000 already mapped failed -16
[  437.237954] binder: BINDER_SET_CONTEXT_MGR already set
[  437.243517] binder: 16523:16526 ioctl 40046207 0 returned -16
[  437.263753] binder: 16566 RLIMIT_NICE not set
[  437.306109] audit: type=1326 audit(1546085413.363:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16567 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:13 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)={0x2a, 0x29, 0x0, {0x0, [{{0x2, 0x0, 0x3}, 0xd0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f91")
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:13 executing program 2:
socket$inet_sctp(0x2, 0x800000000001, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
poll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x0)

[  437.391167] audit: type=1326 audit(1546085413.443:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16572 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:13 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x24103)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

12:10:13 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)

[  437.640198] audit: type=1326 audit(1546085413.693:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16541 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:13 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)

12:10:13 executing program 2:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
preadv(r0, 0x0, 0x0, 0x0)

12:10:13 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x10}], 0x10}, 0x5}], 0x1, 0x800)

[  437.810637] audit: type=1326 audit(1546085413.863:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16593 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:14 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100), 0x0, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

[  438.080450] audit: type=1326 audit(1546085414.133:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16567 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:14 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x0, 0x0)

12:10:14 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x3, 0x0)
bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8)

12:10:14 executing program 1:
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RSTAT(r1, &(0x7f00000000c0)={0x51, 0x7d, 0x0, {0x0, 0x4a, 0x0, 0x0, {0x0, 0x3}, 0x40000000, 0x0, 0x0, 0x0, 0xb, '/dev/loop#\x00', 0x0, '', 0x1, '*', 0xb, '/dev/loop#\x00'}}, 0x51)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0x1, &(0x7f0000000340)='*', 0xffffffffffffffff}, 0x30)
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0)
sendfile(r1, r1, &(0x7f0000000140), 0x7fff)

[  438.192895] audit: type=1326 audit(1546085414.243:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16572 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:14 executing program 5:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

12:10:14 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)={0x2a, 0x29, 0x0, {0x0, [{{0x2, 0x0, 0x3}, 0xd0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RCREATE(r0, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x0, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

[  438.379879] audit: type=1326 audit(1546085414.383:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16617 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:14 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
preadv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/176, 0xb0}], 0x2, 0x0)

12:10:14 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000300)=""/245, 0xf5)

12:10:14 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00')
write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x14}, 0x14)

12:10:14 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00')

12:10:14 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:15 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e)

12:10:15 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
close(r0)

12:10:15 executing program 0:
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000280)=[@enter_looper], 0x1, 0x0, &(0x7f0000000440)="f6"})

12:10:15 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, 0x0, 0x0)

12:10:15 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x3, 0x300)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x7}, 0x50)
ftruncate(0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[]}}, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fcntl$lock(r1, 0x5, &(0x7f0000000780)={0x1, 0x4, 0x0, 0x7})
ftruncate(r1, 0x2007fff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
mount(&(0x7f00000003c0), &(0x7f0000000540)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
stat(&(0x7f00000005c0)='./file0/file1\x00', &(0x7f0000000600))
write(r2, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)

12:10:15 executing program 5:
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RSTAT(r2, &(0x7f00000000c0)={0x51, 0x7d, 0x0, {0x0, 0x4a, 0x0, 0x0, {0x0, 0x3}, 0x40000000, 0x0, 0x0, 0x0, 0xb, '/dev/loop#\x00', 0x0, '', 0x1, '*', 0xb, '/dev/loop#\x00'}}, 0x51)
sendfile(r2, r2, &(0x7f0000000140), 0x7fff)

12:10:15 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000001580)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000))

[  439.378406] binder: 16672 RLIMIT_NICE not set
12:10:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)

12:10:15 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6, 0x24103)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
mkdir(0x0, 0x0)

12:10:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6, 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0xfffffe36)
ioctl$TCSETSF(r0, 0x5437, 0x0)

12:10:15 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)

12:10:16 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:16 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

12:10:16 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:16 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff})

12:10:16 executing program 2:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
set_robust_list(&(0x7f0000000140), 0x18)

12:10:16 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0))

12:10:16 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:16 executing program 0:
syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0)

12:10:16 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:16 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b7020000fe000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x29, 0x0, &(0x7f0000000000)="f6bf5ca5888deb3c50d040e6e318385077d5b79dd7e4d74a7a5f9a1dadbcfc28e6ee3f5757e89ddd4b", 0x0}, 0x28)

12:10:16 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
getitimer(0x0, 0x0)

12:10:16 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000001580)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0)

12:10:16 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x3, 0x300)
ftruncate(0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fcntl$lock(r1, 0x5, 0x0)
ftruncate(r1, 0x2007fff)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)

12:10:17 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0)
close(r2)
close(r0)

12:10:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)

12:10:17 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)

[  441.260308] kauditd_printk_skb: 11 callbacks suppressed
[  441.260330] audit: type=1326 audit(1546085417.313:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16720 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:17 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
close(r0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f00000009c0)={r1})
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)

12:10:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
close(r0)

12:10:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6, 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0xfffffe36)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
ioctl$TCSETSF(r0, 0x5437, 0x0)

12:10:17 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:17 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, 0x0)
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

[  441.669707] audit: type=1326 audit(1546085417.723:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16741 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:18 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x8000fffffffe)

[  442.046068] audit: type=1326 audit(1546085418.103:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16760 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:18 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0xfffffe36)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1ff, 0x1})
gettid()
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff8})
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)

12:10:18 executing program 5:
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSTAT(r2, &(0x7f00000000c0)={0x51, 0x7d, 0x0, {0x0, 0x4a, 0x0, 0x0, {0x0, 0x3}, 0x40000000, 0x0, 0x0, 0x0, 0xb, '/dev/loop#\x00', 0x0, '', 0x1, '*', 0xb, '/dev/loop#\x00'}}, 0x51)
sendfile(r2, r2, &(0x7f0000000140), 0x7fff)

12:10:18 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:18 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06w=\xea\x8f\xe2\xa4\xe3\x85!M\xeb&')
dup3(r0, r1, 0x0)

12:10:18 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(0xffffffffffffffff, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:18 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x10, 0x1}], 0x10}}], 0x1, 0x800)

12:10:18 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
lchown(0x0, 0x0, 0x0)

12:10:19 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

12:10:19 executing program 4:
unshare(0x40000000)
geteuid()
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000500)=""/206)
r1 = gettid()
ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000080)={'team0\x00\x00\x00\x00\x00\x12\x00', @ifru_settings={0x0, 0x0, @te1=0x0}})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x6)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:19 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

[  443.176685] audit: type=1326 audit(1546085419.233:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16832 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  443.267865] IPVS: ftp: loaded support on port[0] = 21
12:10:19 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))

12:10:19 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000140)='memory.current\x00'}, 0x30)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000"])
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"])
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x3, &(0x7f0000000040)='-@\x00'}, 0x2a)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4)
close(r3)
close(0xffffffffffffffff)

[  443.536744] audit: type=1326 audit(1546085419.593:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16857 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:19 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:19 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:19 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)={0x2a, 0x29, 0x0, {0x0, [{{0x2, 0x0, 0x3}, 0xd0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x0, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

[  443.962797] audit: type=1326 audit(1546085419.943:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16832 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:20 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
waitid(0x0, 0x0, 0x0, 0x0, 0x0)

12:10:20 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

[  444.322062] audit: type=1326 audit(1546085420.373:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16857 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  444.607943] audit: type=1326 audit(1546085420.493:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16973 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:20 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0)

12:10:20 executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00')
sendfile(r0, r2, 0x0, 0x800000bf)

12:10:20 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:21 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:21 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0)

[  445.170676] audit: type=1326 audit(1546085421.223:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16973 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSBRK(r0, 0x5409, 0x2)

12:10:21 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r1, 0x2)
dup3(0xffffffffffffffff, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:21 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x7})

12:10:21 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0))

12:10:21 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
inotify_rm_watch(0xffffffffffffffff, 0x0)

[  445.664737] audit: type=1326 audit(1546085421.723:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17076 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:21 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @broadcast, @local}, &(0x7f0000000040)=0xc)
setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@remote, @broadcast, r2}, 0xc)
bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4)
bind$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r3 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r3, 0x10099b7)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e21, 0xffffffff00000001, @local, 0x6}, {0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, [], 0x10}}}, 0x5c)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp(0x0, 0x0, 0x0)

12:10:21 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:21 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
lseek(r0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f00000000c0), 0x7f8)

12:10:22 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
io_setup(0x6, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

12:10:22 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

12:10:22 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:22 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

[  446.458179] kauditd_printk_skb: 3 callbacks suppressed
[  446.458206] audit: type=1326 audit(1546085422.513:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17076 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:22 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

12:10:22 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

[  446.696732] audit: type=1326 audit(1546085422.753:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17079 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:10:22 executing program 5:

[  446.766622] audit: type=1326 audit(1546085422.783:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17109 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:22 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

[  446.937048] audit: type=1326 audit(1546085422.993:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17091 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:23 executing program 5:

[  447.053955] audit: type=1326 audit(1546085423.093:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17095 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:23 executing program 0:

12:10:23 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:23 executing program 4:

12:10:23 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:23 executing program 0:

12:10:23 executing program 5:

12:10:23 executing program 4:

[  447.506257] audit: type=1326 audit(1546085423.563:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17109 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:23 executing program 1:

12:10:23 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:23 executing program 4:

12:10:23 executing program 0:

12:10:23 executing program 5:

12:10:23 executing program 4:

12:10:24 executing program 5:

12:10:24 executing program 0:

12:10:24 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:24 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:24 executing program 1:

12:10:24 executing program 4:

12:10:24 executing program 5:

12:10:24 executing program 0:

12:10:24 executing program 4:

12:10:24 executing program 5:

12:10:24 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:24 executing program 1:

12:10:24 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:24 executing program 0:

12:10:24 executing program 4:

12:10:24 executing program 5:

12:10:24 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}, {{0xd0, 0x3, 0x5}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}]}}, 0x49)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:24 executing program 1:

12:10:25 executing program 4:

12:10:25 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

12:10:25 executing program 0:

12:10:25 executing program 5:

12:10:25 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:25 executing program 1:

12:10:25 executing program 4:

12:10:25 executing program 5:

12:10:25 executing program 0:

12:10:25 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:25 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x1000000000014)

12:10:25 executing program 4:

12:10:25 executing program 5:

12:10:25 executing program 0:

12:10:25 executing program 1:

12:10:25 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:25 executing program 4:

12:10:25 executing program 5:

12:10:26 executing program 0:

12:10:26 executing program 4:

12:10:26 executing program 1:

12:10:26 executing program 5:

12:10:28 executing program 4:

12:10:28 executing program 5:

12:10:28 executing program 0:

12:10:28 executing program 1:

12:10:28 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:28 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x1000000000014)

12:10:28 executing program 1:

12:10:28 executing program 4:

12:10:28 executing program 5:

12:10:28 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:28 executing program 0:

12:10:29 executing program 4:

12:10:29 executing program 0:

12:10:31 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x1000000000014)

12:10:31 executing program 1:

12:10:31 executing program 5:

12:10:31 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:31 executing program 4:

12:10:31 executing program 0:

12:10:31 executing program 4:

12:10:31 executing program 1:

12:10:31 executing program 0:

12:10:32 executing program 5:

12:10:32 executing program 2:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:32 executing program 5:

12:10:34 executing program 3:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x2)
dup3(r1, r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000014)

12:10:34 executing program 0:

12:10:34 executing program 4:

12:10:34 executing program 1:

12:10:34 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:10:34 executing program 5:

12:10:35 executing program 0:

12:10:35 executing program 4:

12:10:35 executing program 5:

12:10:35 executing program 1:

12:10:35 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, 0x0, 0x0, 0x0)

12:10:35 executing program 5:

12:10:35 executing program 1:

12:10:35 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffd)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x0)

12:10:35 executing program 0:

12:10:35 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, 0x0, 0x0, 0x0)

12:10:35 executing program 4:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2100, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x1, 0xffff, 0x1000})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x297ef)
close(r2)

12:10:35 executing program 5:
socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)

12:10:35 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x297ef)

12:10:35 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, 0x0, 0x0, 0x0)

12:10:36 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1)
read(r1, 0x0, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080))

12:10:36 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x24103)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

12:10:36 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

12:10:36 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000002680), 0x0, 0x0)

12:10:36 executing program 5:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
pkey_alloc(0x0, 0x2)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x297ef)
close(r1)

12:10:36 executing program 1:
socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_STAT(0x0, 0x2, 0x0)

12:10:36 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x24103)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

12:10:36 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000002680), 0x0, 0x0)

12:10:36 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000))

12:10:36 executing program 5:
socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_GET_NO_NEW_PRIVS(0x27)

12:10:36 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
flistxattr(r1, &(0x7f00000004c0)=""/210, 0x27f29145a81681e4)

12:10:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000002680), 0x0, 0x0)

12:10:37 executing program 4:
memfd_create(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)

12:10:37 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0})

12:10:37 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
timer_create(0x0, 0x0, &(0x7f0000000180))

12:10:37 executing program 0:
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
read$eventfd(r0, 0x0, 0x0)

12:10:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000002680)=[{0x0}], 0x1, 0x0)

12:10:37 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f)
r1 = gettid()
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1104400000016)

12:10:37 executing program 1:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2100, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)

12:10:37 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

12:10:37 executing program 0:
creat(0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
read$eventfd(r0, 0x0, 0x0)

[  461.432307] audit: type=1326 audit(1546085437.483:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17426 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000002680)=[{0x0}], 0x1, 0x0)

12:10:37 executing program 1:
memfd_create(0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(0xffffffffffffff9c, &(0x7f0000001080)=@ipx, &(0x7f0000001100)=0x80, 0x0)
shutdown(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x0)
creat(0x0, 0x0)
rt_sigsuspend(0x0, 0xfffffffffffffe3a)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
read$eventfd(r0, 0x0, 0x0)

12:10:37 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f)
r1 = gettid()
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1104400000016)

12:10:37 executing program 4:
rt_sigsuspend(0x0, 0xfffffffffffffe3a)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
read$eventfd(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioprio_get$pid(0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x0)

12:10:37 executing program 0:
setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
lstat(0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace(0x4207, r1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x8001})
fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000100)={0x0})
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000580), 0x6)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x40001)

[  461.906014] ptrace attach of "/root/syz-executor0"[11942] was attempted by "/root/syz-executor0"[17471]
[  462.081907] audit: type=1326 audit(1546085438.133:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17426 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:38 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
timer_gettime(0x0, 0x0)

12:10:38 executing program 4:
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
read$eventfd(r0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

12:10:38 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

12:10:38 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000002680)=[{0x0}], 0x1, 0x0)

12:10:38 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0)

[  462.317005] audit: type=1326 audit(1546085438.373:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17497 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:38 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
read$eventfd(r0, 0x0, 0x0)

12:10:38 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

12:10:38 executing program 1:
pipe(&(0x7f00000000c0))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {0x0, 0x0, 0x0, 0x8b, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffd})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:10:38 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc)
socket$inet6(0xa, 0x2, 0x0)
memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r1, &(0x7f00000000c0))
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = getpgid(0xffffffffffffffff)
ptrace$getregset(0x4204, r2, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=""/97, 0x61})
add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

[  462.701490] *** Guest State ***
[  462.705001] CR0: actual=0xffffffff9ffffffd, shadow=0xfffffffffffffffd, gh_mask=fffffffffffffff7
[  462.714088] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  462.723028] CR3 = 0x0000000000000000
[  462.726775] RSP = 0x0000000000000000  RIP = 0x000000000000fff0
[  462.732874] RFLAGS=0x00010002         DR7 = 0x0000000000000400
[  462.738882] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  462.745644] CS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  462.753871] DS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  462.761944] SS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  462.769955] ES:   sel=0x0000, attr=0x0808b, limit=0x00000000, base=0x0000000000000000
[  462.778065] FS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  462.786145] GS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  462.794246] GDTR:                           limit=0x00000000, base=0x0000000000000000
[  462.802367] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  462.810373] IDTR:                           limit=0x00000000, base=0x0000000000000000
[  462.818483] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  462.826563] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  462.833099] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  462.840583] Interruptibility = 00000000  ActivityState = 00000000
[  462.846936] *** Host State ***
[  462.850213] RIP = 0xffffffff812b177c  RSP = 0xffff888049d9f380
[  462.856589] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  462.863123] FSBase=00007fc9901be700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  462.870976] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  462.877027] CR0=0000000080050033 CR3=00000001fe983000 CR4=00000000001426f0
[  462.884143] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac015f0
[  462.890851] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  462.897064] *** Control State ***
[  462.900570] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[  462.907350] EntryControls=0000d1ff ExitControls=002fefff
[  462.912922] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  462.919930] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000
[  462.926708] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  462.933391]         reason=80000021 qualification=0000000000000000
[  462.939737] IDTVectoring: info=00000000 errcode=00000000
[  462.945286] TSC Offset = 0xffffff0401826e50
12:10:38 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f)
r1 = gettid()
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1104400000016)

12:10:38 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x06\x00C\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00')
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0xfff, 0x2})

12:10:38 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc)
socket$inet6(0xa, 0x2, 0x0)
memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r1, &(0x7f00000000c0))
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = getpgid(0xffffffffffffffff)
ptrace$getregset(0x4204, r2, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=""/97, 0x61})
add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

12:10:38 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0)
read(r1, 0x0, 0x0)

[  462.949633] EPT pointer = 0x00000001febe601e
[  463.120433] audit: type=1326 audit(1546085439.173:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17497 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:10:39 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0x9}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)

12:10:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_GET_ENDIAN(0x13, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
clone(0x201fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0)
read(r0, 0x0, 0x0)
accept(r1, &(0x7f0000000400)=@can, &(0x7f0000000480)=0x80)

12:10:39 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$inet6(0xa, 0x3, 0x4000000000001)
connect$inet6(r2, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000c9af18)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070007020000000000000000050000"], 0x10}}, 0x0)
sendmsg(r2, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0)

12:10:39 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc)
socket$inet6(0xa, 0x2, 0x0)
memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r1, &(0x7f00000000c0))
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = getpgid(0xffffffffffffffff)
ptrace$getregset(0x4204, r2, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=""/97, 0x61})
add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

[  463.211916] *** Guest State ***
[  463.215318] CR0: actual=0xffffffff9ffffffd, shadow=0xfffffffffffffffd, gh_mask=fffffffffffffff7
[  463.224498] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  463.233496] CR3 = 0x0000000000000000
[  463.237304] RSP = 0x0000000000000000  RIP = 0x000000000000fff0
[  463.243469] RFLAGS=0x00010002         DR7 = 0x0000000000000400
[  463.249485] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  463.256499] CS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  463.264612] DS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  463.272724] SS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  463.280771] ES:   sel=0x0000, attr=0x0808b, limit=0x00000000, base=0x0000000000000000
[  463.288896] FS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  463.296990] GS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  463.305145] GDTR:                           limit=0x00000000, base=0x0000000000000000
[  463.313253] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  463.321318] IDTR:                           limit=0x00000000, base=0x0000000000000000
[  463.329339] input: syz1 as /devices/virtual/input/input5
[  463.335057] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  463.343151] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  463.349641] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  463.357314] Interruptibility = 00000000  ActivityState = 00000000
[  463.363680] *** Host State ***
[  463.366916] RIP = 0xffffffff812b177c  RSP = 0xffff8881f574f380
[  463.373073] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  463.379561] FSBase=00007fc99019d700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  463.387502] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  463.393562] CR0=0000000080050033 CR3=00000001fe983000 CR4=00000000001426f0
[  463.400619] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac015f0
[  463.407474] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  463.413653] *** Control State ***
[  463.417171] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[  463.424030] EntryControls=0000d1ff ExitControls=002fefff
[  463.429526] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  463.436620] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000
[  463.443404] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  463.450050]         reason=80000021 qualification=0000000000000000
[  463.456567] IDTVectoring: info=00000000 errcode=00000000
[  463.462198] TSC Offset = 0xffffff0401826e50
[  463.466557] EPT pointer = 0x00000001febe601e
12:10:39 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000740)=""/236, 0xec}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

12:10:39 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc)
socket$inet6(0xa, 0x2, 0x0)
memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r1, &(0x7f00000000c0))
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = getpgid(0xffffffffffffffff)
ptrace$getregset(0x4204, r2, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=""/97, 0x61})
add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

12:10:39 executing program 1:
pipe(&(0x7f00000000c0))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {0x0, 0x0, 0x0, 0x8b, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffd})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:10:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_GET_ENDIAN(0x13, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
clone(0x201fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
read(r0, &(0x7f0000004d00)=""/4096, 0x100000088)

12:10:39 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f)
r1 = gettid()
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1104400000016)

12:10:39 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)

[  463.901404] input: syz1 as /devices/virtual/input/input6
12:10:40 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070007020000000000000000050000"], 0x10}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0)

[  464.024393] input: syz1 as /devices/virtual/input/input7
12:10:40 executing program 2:
msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000069b8397c500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007fbd39f35c6ef38992000000004124597a3d76b3d61c00303111"], 0x1, 0x0, 0xa4a3ad41a879dde0)

[  464.304016] *** Guest State ***
[  464.307532] CR0: actual=0xffffffff9ffffffd, shadow=0xfffffffffffffffd, gh_mask=fffffffffffffff7
[  464.316524] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  464.325608] CR3 = 0x0000000000000000
[  464.329366] RSP = 0x0000000000000000  RIP = 0x000000000000fff0
[  464.335462] RFLAGS=0x00010002         DR7 = 0x0000000000000400
[  464.341482] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  464.348267] CS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  464.356452] DS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  464.364571] SS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  464.372651] ES:   sel=0x0000, attr=0x0808b, limit=0x00000000, base=0x0000000000000000
[  464.380704] FS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  464.388782] GS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  464.396869] GDTR:                           limit=0x00000000, base=0x0000000000000000
[  464.404942] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  464.413063] IDTR:                           limit=0x00000000, base=0x0000000000000000
[  464.421118] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  464.429194] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  464.435701] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  464.443281] Interruptibility = 00000000  ActivityState = 00000000
[  464.449550] *** Host State ***
[  464.452840] RIP = 0xffffffff812b177c  RSP = 0xffff8881fce0f380
[  464.458905] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  464.465428] FSBase=00007fc9901be700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  464.473343] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  464.479279] CR0=0000000080050033 CR3=00000001fce9a000 CR4=00000000001426e0
[  464.486412] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ac015f0
[  464.493231] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  464.499375] *** Control State ***
[  464.502954] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[  464.509688] EntryControls=0000d1ff ExitControls=002fefff
[  464.515260] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  464.522325] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000
[  464.529043] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  464.535777]         reason=80000021 qualification=0000000000000000
[  464.542189] IDTVectoring: info=00000000 errcode=00000000
[  464.547707] TSC Offset = 0xffffff033dac3837
12:10:40 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[  464.552197] EPT pointer = 0x00000001fd00501e
[  464.918945] input: syz1 as /devices/virtual/input/input8
[  464.930774] input: syz1 as /devices/virtual/input/input9
12:10:41 executing program 0:
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8)
timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000))
timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)

12:10:41 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

12:10:41 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x3, 0x4000000000001)
connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070007020000000000000000050000"], 0x10}}, 0x0)
sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0)

12:10:41 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="24000000220007031dfffd946f610500000000000500000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

12:10:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @local}, 0x4c, {0x2, 0x0, @multicast1}, 'ip6gretap0\x00'})

[  465.563485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
12:10:41 executing program 1:
pipe(&(0x7f00000000c0))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {0x0, 0x0, 0x0, 0x8b, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffd})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:10:41 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070007020000000000000000050000"], 0x10}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0)

12:10:41 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f4812fe01b2a4a280930a06000000a84306910000000b00140035000c00060000001900154002000000000000dc1338d54400009b84136ef75afb83dec7b0cc114915afe92ca9a2fba14411001600", 0x55}], 0x1}, 0x0)

12:10:41 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x1dd, 0x0)

[  465.783651] netlink: 'syz-executor0': attribute type 20 has an invalid length.
[  465.791115] netlink: 'syz-executor0': attribute type 21 has an invalid length.
[  465.798742] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'.
[  465.807393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  465.814017] IPv6: NLM_F_CREATE should be set when creating new route
[  465.820555] IPv6: NLM_F_CREATE should be set when creating new route
[  465.970130] *** Guest State ***
[  465.973770] CR0: actual=0xffffffff9ffffffd, shadow=0xfffffffffffffffd, gh_mask=fffffffffffffff7
[  465.982781] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  465.991886] CR3 = 0x0000000000000000
[  465.995635] RSP = 0x0000000000000000  RIP = 0x000000000000fff0
[  466.001794] RFLAGS=0x00010002         DR7 = 0x0000000000000400
[  466.007810] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  466.014708] CS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  466.022853] DS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  466.030871] SS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  466.038960] ES:   sel=0x0000, attr=0x0808b, limit=0x00000000, base=0x0000000000000000
[  466.047089] FS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  466.055190] GS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
12:10:42 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f4812fe01b2a4a280930a06000000a84306910000000b00140035000c00060000001900154002000000000000dc1338d54400009b84136ef75afb83dec7b0cc114915afe92ca9a2fba14411001600", 0x55}], 0x1}, 0x0)

12:10:42 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

[  466.063282] GDTR:                           limit=0x00000000, base=0x0000000000000000
[  466.071313] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  466.079402] IDTR:                           limit=0x00000000, base=0x0000000000000000
[  466.087505] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  466.095634] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  466.102178] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  466.109661] Interruptibility = 00000000  ActivityState = 00000000
[  466.116028] *** Host State ***
[  466.119336] RIP = 0xffffffff812b177c  RSP = 0xffff8881f93af380
[  466.125476] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  466.132053] FSBase=00007fc9901be700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  466.139894] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  466.145937] CR0=0000000080050033 CR3=00000001f8c61000 CR4=00000000001426f0
[  466.153059] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac015f0
[  466.159768] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  466.165969] *** Control State ***
[  466.169466] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[  466.176289] EntryControls=0000d1ff ExitControls=002fefff
[  466.181854] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  466.188818] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000
[  466.195635] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  466.202341]         reason=80000021 qualification=0000000000000000
[  466.208693] IDTVectoring: info=00000000 errcode=00000000
[  466.214278] TSC Offset = 0xffffff023d8d4b47
[  466.218635] EPT pointer = 0x00000001f9cb301e
[  466.278749] netlink: 'syz-executor0': attribute type 20 has an invalid length.
[  466.286439] netlink: 'syz-executor0': attribute type 21 has an invalid length.
[  466.293939] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'.
[  466.302676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
12:10:43 executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = accept4(0xffffffffffffff9c, &(0x7f0000001680)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000140)=0x80, 0x80800)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001b80)={&(0x7f0000001700), 0xc, 0x0}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getpeername(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @initdev, @remote}, &(0x7f00000005c0)=0xc)
sendmmsg(r0, &(0x7f0000008ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10)
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x7fffffffff, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r2, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x4007ffa, 0x0, 0xffffffffffffff06)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000001940), &(0x7f00000019c0)=0x68)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0)

12:10:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="d3", 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000140)=' ', 0x1, 0x0, 0x0, 0x0)

12:10:43 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x3, 0x4000000000001)
connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070007020000000000000000050000"], 0x10}}, 0x0)
sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0)

12:10:43 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000280)={0x1000000efffffff, 0xe00000000000000, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d000010000000000800d30000000003000600252000000200046ac00200010000000001000000080012000200030000000000fa0000003000000002030000050000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde0000000003000500002000000200ebf2df0000210008000002000000"], 0x80}}, 0x0)

12:10:43 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x36, 0x0, &(0x7f00000005c0)="e460cdfb0700080000000a9386dd6a00000000012900007ed357abe77daf69b778ac5ec2f84000000081ffad000000e8d50000000100", 0x0, 0x40004}, 0x28)

12:10:43 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000200)="ba605cc9b6ec24074ca3b5f1cc52af3954fc898c376133a339bb2008a702b33d824b06bf4b31e2f208bd7c85ba267c24ee003149615a58a9f667e9ca67f619330cfe32604e43848710c73b8ef3ce5fd4e1848d0b260e2fda899bc3449b5379a8967d96cd0ff32a1ba6af281a40a3506eda5b9e1c6b91d0e9efe5a678b1e5cf041e6d70cd45124a0432bc2a6bd956f650e3d0b43892930f0a52867dbe4f88fe1c5dda7b915ffd0993ab7f0a55a9227d588a635cc9e2be6609d4a685c70a86018397fea5fac6385e8b860d68c047", 0x0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xc, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="1623b4b90c99174c2c49032c85e8", 0x0, 0xabf3}, 0x28)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

[  467.214293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
12:10:43 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getdents64(r0, &(0x7f0000000340)=""/57, 0x252)

12:10:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="d3", 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000140)=' ', 0x1, 0x0, 0x0, 0x0)

12:10:43 executing program 5:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0), 0xa)

12:10:43 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100))
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x4)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3f})
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
read(r1, &(0x7f0000000080)=""/19, 0xffffff5c)

12:10:43 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
sched_setaffinity(0x0, 0x7, &(0x7f0000000240)=0x8000009)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x8b)
sendto$inet(r1, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x0, 0x2ffd}, 0x4)
sendto$inet(r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)={0x64, 0x6f, 0x1, {0x7, [{0x4b, 0x2, 0x4}, {0xa0, 0x1, 0x6}, {0x4, 0x4, 0x7}, {0x2, 0x2, 0x1}, {0x2, 0x3, 0x8}, {0xd8, 0x80, 0x6}, {0x0, 0x0, 0x5}]}}, 0x64)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x10001)

12:10:43 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000340)="c3bc", 0x2, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080), 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000300)=[{0x0}], 0x1)

12:10:43 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8)
shutdown(r1, 0x1)

12:10:43 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8)

12:10:44 executing program 2:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
chdir(0x0)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0\x00', 0x0)

12:10:44 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
unshare(0x400)
r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={r1})

12:10:44 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0)
mkdir(0x0, 0x0)

12:10:44 executing program 1:
r0 = memfd_create(&(0x7f0000000380)='\x00\x8c\x00b\x8fM\xa7y\x10\x8d7\xbf\xc0\xe9m\x12\xf4\x19\xcb=\xc5,\x02V\xb1\vF\xb8},\x8f\t\x8b\xa2\x0f\xc7\x06=.\xb8c\xca4!\x9b=~\x14\xa0\xb4\xe8\xfd\x8c\x9a\xcaV\xa0A\x1be\x8e\x05a\x88,\x19\x8d7sS\x0f\xc2\xc9de\x82\xcc\xbd\xc9\x99\xfa\x80\xbc\xe3Q\x05#^R\x8eY\x80Z(\xbf\xe1\'\xff\xe5NU\xc9\xf9|\v\xa4\xae\xff\xf4\xd0\xf1\t\x8c\x8f\x03p\x1f\xca\xb98\x1a\xc1\xcej\xc8\xcbV\x9e\xa2\xea\xc0\xc6\x83)K\x8e\xa8P\x13,]Oo\x03l\xa7\xfdc\x97\xe6\xe4\xfbCj}ig|$\xbc#2\xf5\x19\xe9\xd1\xc9\x92=h\x92\xee\x06\x16Z\xab\x9f\xde\x8b', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

12:10:44 executing program 3:
socketpair$unix(0x1, 0x10000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

12:10:44 executing program 5:
mkdir(&(0x7f00000009c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140), 0x24, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r0, r1)
fgetxattr(r3, &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x5a)

12:10:44 executing program 4:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00')
syz_genetlink_get_family_id$tipc2(0x0)
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002)

12:10:44 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x24103)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

12:10:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080))

12:10:44 executing program 3:
r0 = socket(0x10, 0x2, 0xc)
fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', 'em0em0wlan1)\x00'}, 0x0, 0x0)

12:10:44 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r3 = socket$nl_route(0x10, 0x3, 0x0)
pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

12:10:44 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0)
mkdir(0x0, 0x0)

12:10:44 executing program 2:
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpgid(0xffffffffffffffff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000340))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x9, 0xfffffffffffeffff, 0x1ff, 0x6, 0x563b, 0x4, 0x8, 0x8000, 0x0, 0x7ff})
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000740)={{0x2, 0x0, 0x400, 0x0, 0x6}, 0x20})
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x20000001, 0x0, 0x0)
shutdown(r5, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x98, r6, 0x320, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3a}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x716}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0)
splice(r5, 0x0, r1, 0x0, 0xab11, 0x0)

12:10:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

[  468.918707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  468.925535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
12:10:45 executing program 3:
socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socketpair(0x2, 0xa, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x8)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:45 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})

[  469.121136] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  469.144971] ptrace attach of "/root/syz-executor4"[18085] was attempted by "/root/syz-executor4"[18086]
[  469.154734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
12:10:45 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

12:10:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:45 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf74, 0xf8c, 0x5, {"9d9e5703e55557b12cd54d3c0413770f0df30e5caea81ad8e2f728396a57f2772aee22c228b8a4782abbef5c68f1505e85015e92f7400f280e5af3ca007cf324d178fa5a9c111c53970207fd175e1a3336c144d98ad7fbaf1a497e0158b57ea9476f9d30179b7831507f3a06634c16507821507ee44a838505c2383a5c07dff28b7175244a0944f0aa1417a2d43598899c97e3c18339cfe1dcca7a518bd775c864eaced3beb0d4fa3093fbb8bf1312ae21449a1ac888f83b2014f74d4bf2e617e8b08228473a2fd5659c0f25476dd2279fc2ccb5c361d6f64c5719aa5d2deec755bba6219e756b21eab2121a470223483cb6a04d1f159ecf782060668a2b1d63cb5ff568da8da9a61c13e97bf99dde32e3f81e7ab2e22e7a5c0e16bb14dba6446070dae561a3ff933ebc11b5591f407d0a07bd626bbdc90290bbf8bb2014c10d71e5c9a4e03331791e0f68579d67a0ab6b3846b1ae4f043bdbd5899ac4b958922afe92ea304bff4bfa2820e27c3b4b08ac6bb3c4822540e33097ce773f0fc852e1d2e4a17e944b585da2a03a148eaa4220c1fd595f92a5e56daf36d44c85266195f22a62117a33733ad5068e32d471b23dc8f0551dd8e44929b04415d31d31d9475792f4da34c114b1487232b21583a5c95f7e9f9aa3da4aaf205e9835e0329a4670cf4829692f10db6092354a4e8a30ebe0392ba45183940fc9004f05640bdf6c9fb00a6d8b36d6f943b7966506e39bf5a85207121436428ef48ab5e38a67d8ca80d16014e3a325039b0c6ee7d9b5b807acaa65882aeff59075134efa4d1bea8443fda67425da6aa119645db78321b23a17c68c69dbf066125e0b23f7dc4c3e49c23b2b070601301128128eae3bc96685395b41924b23e24223618b3a6fb276f6cf2ddc7c269e6a9f20f33668906d4e533f65dce28ebc5ab2516ca0b707b37cba1a1c996b7ce63de774ac4e3366b85c22d9cbb53a0d294dbdb8d65f44b07eb922dbf808f1950934c863b6a761ea6ea9fb98d5763e5ebac6d7e982cf3a92080e173e83c8a8df93855fc7c233cdcd6ace3129315281f84b0cda56b21e0cbf17ee1bb9b4f7dc784bb3270b81c06217132d2406b9789265c757eaf19103884c1dcc4b77d0994242ea9bde9e19d122b5b2079b973694c2ebdaef7d1d466a9cd5a10b74adcd49daf44bd9a8a28f5a511e9558a124911dbb13f4538a0280ef88d4e6ed113080a11a12810d7afbda04c1d60e3036673ded0d35805e3e28e42669547f2ad6601fbde592de629e54d8baaa7aecbc7db431999945282e2597db144b2a9ddf331ce4450f1407da691aa80a0857b31eb400cccae96fb8c113700f70078bf9e35bb5c4fc0039582476dd9b539a90b82b24d59f7a2d317839cb96daf6b72a3c4f7cdf3a540b8ab618697724975de4d428d01498e35b4ec40134959c0fb8f42effc15c8c43ccb56c85e1e1e5e4f37e7255b60b0fd1cfc1c174636b2055de93f15a84b6fb94ad5379789f5d2444190cf1e72bca166a3d1d8c9abc3d364fb2544ff9786adf5ffef1fbb6500f5290b927058cecaed9729a5d885ba3a9f194be5cfd02f7512efea9f2eaee964299e6f66c6fdb95633893b65054100104b1bd8f29afd9b007c852d1b15b83f94b96cb001f0d87d781c5a8e8d5876ed7b1a2d308c66571007b5aa6be73b0ca488af493976ddcd8f6faa94d20007b1939753ea0e75495fce0ef2bd3d0ea9fc9ea25ffbdacd1f27f1cb7f75647231b9a48d768d6c24d06affa52b11ca0cb9c185abfcd438625788f8ee1bc1ce2c7e46969d618db9f11608e42ecae0360428bab75e0e3cf76715151d98d11c750f603293eb841299571379431af140166d9f58ad81a13823f4c3decf3592c3af3681a5062222c5ed6211a0826af93be4ad1a2ec627e71031c1c238123a9bc61584afed60c032e5e4fd1152145a0a5b6eae611af66246954acd1892108b1cac1647049d4df284522321438bb5366fd7ad5a0ec33ae1bd6d47342314a71e69c8a3daba0d8a13fb533a1a12a8135a4caa09c34af3011660cf3f29d1e0696919916bab2c73accc97a7d677e5aed09779bc45fa20df51513790076f684cb641edd39095148def1ce4c68112cfbc9e03c74dce82585baee21921350af0984632ceb4b62c9fac2af36d3186d2404acac7327cc31e9a24e846ec345a7f8cfc9030eb7977218039f1c8451eb5b6f54ac079d891100a81b7907da0bdbba4d9d5b6ad02a4232df13c121b210caad7c9cb9cc2dae37c4aa8083c887ba8a42ab49ea1dbe93ee0d0ed2d681fe8e29f74b1be4deafec8817c4d0e0b8f2e721ddc226cc2c55727577ac5b741b877a48e89d2c0dd704467814dee9e932036c5e2e24fb64856ad13b97623aa871e46a8929c33ba9b450469b7c3961f1e8f3d06f5aa72e172f0f1765fe258f52d903fbcb4fefa01658c4904208a4a15e7c65af71e9d65af051410a5114b4b20ffac6d1092926cf34d32c70afea65d5422a889a4c881fb3d24ba5e45cb170945d6c91f59ad9b62009ffbed3a9bf1293434ca4c96b8549fdfaa655c048ccac03dcc3c2b1c874c94f1004bbe2878212e1edc51b42fdbc4def7163fef4d0351c4363516fb0cd29c0fd97ae1cedcb0ecff86d81eef696f0260b2b9b884a90ffa913ea5ae062599ba33a8cd6cbc2f33099ba48b765ce049b489df571f0773d7e1aee0f98f91c7d931457577c4156d94f6d37338f2f0aba95268a2067043e39e12f2f4c0c5e624280482d221418291b0c3a4e9d27e2e887a54d455e5271b29ee57b0f6ef416521f4070c874b7d5c5014b0fd5f6764357a79dd9e1852291ae564ebcdff201e8602bd09b454b5a71411b6fb7ae5a8b3e7681e0bc3beeb3a0e8771645809060a1a5c47884e738f7bdb69b99d48d5c864d600cc72230eae0360672421920ead9a118f03dc328bef995b32ee2f4ecd8caf1d2bc11845429b817cfadd8dbddf6bbd73284e382017c324561c499674f940891a7a3550763baf4d2b79ec2557b7aa2f797fb3b0196accab8c99b8d63340b3438d7cd08512a74f0f5a493fb0278e69994f5e9a4d5d6ca3070c128a78388b9622f58e69ffab73631df574e153c02e361b3f7d3c6e8a5edca334ae1a707362ade10d09bb50cdfd3c132240e3ffac963b55bc861dc372fe2673df5c92a4b3daea684f07ef18b4045cae6e8ad0d9b9bd29c3bab85f321b50681871718278954422da95945965ac40987032691620b33e7bc7c2769514f16e21ccad0f78e7b44a620b27aa9bf43d4d6d80d167b2bdbdc31fde4cac6bb380c0744d087477c932ed59de99bdfc146ec4f8e2e68e09f91df51ae0d1b5b565e0c73dc8b627591348c4e8a1843c4797e5cb89d3c451f97432762284bde4c6cc18dacb7ef780d5e0a21287d7ebb5aad03755ffbdabd847e15e547ed22fdf30f050e78636159a287cc379529fde6659a71fe97c8c71ede15729158b1d0b046dc36eadd415c7be098a53bacf64c0dd83620834827570a15a39b37cfe426c8366ab9a72870b6a414857d79e451c5f4c17d59cb4339bfba361f039aabe5d9132089ab2066d0ea4eeceb477dca02e84709e736a1fe33a39c2f4242968e90cad13c2d1eff114fe556974300f0aef72b703dbc719087aa9182a6bd90c6537b1729bd0167e1aee781d53901208d2eaa7f6b8c4e9dbd2f99f327d6045b862fbdfe146c7a079247c0cf49d8974dec6b90248efb17914cbf14c50378bb12c5edef30dcbc4860b6537553d8def4249fadaf8957a56f9dab6de3be61ba277ff5fac9966ff81dd6c16ff4af09a0796aeeb038c0de0f77642ec68f330f317e65c2f26c5c82cae89cee31dc298cb74665079ae95973064e40f1deb0f9fa3d351420dea48e4748d9cccc4e01f1f29878d7a66b08bcf4d087942d981e15499f16fe63137847af98975424fbb3fbe761b9a8bdfddb3dc0b31a40e1514627386328ee2ade7ef9bc0ef28c236c317d854336786d749f616687480cf1c14373f496910d64a60abf8c4d75ec54f7c49f5aacf2fb3f6cd86c951a4841acab95cf2fe3d59df32a6a56045ead03a33fb6b00b4f60589eb3d91643aac63f11194be660ace3cb35a9e7b78ee04b2e74698ae5bd91f3ffb8e5a069da9bff1d378f618bcf03b9d1569d91794f13de7ba4f03e6b06dd4e555492e36576313f0a254f9d5d8fa83259bb9cbd541b346d84d70b52f1a8a1650ab34d0aaf20fb4844548b6d214923fa6dc72fe5c7a6e0c7dbeda9ce28065948563c9e5d5fe8f54c4f2cc828be7670ad5e1f938e05af03d5950c91f977b8d16b4d938c105eac490a95ebecc2d2d9fdd34a006ecd8c849ce9041e22aec107d109649a212b8cd2f22e76d54bc33b9328de6e48529b6797d041f0356277e7877a130af1b56bff800aa640308db67ed67ab08da62446eb8c1ec569a87c95e3bc1a2b5268f512b160eb944f02d7e352e04e92f6e62e7eab5370c8c65060ffa27ea4acd4792cd558f44a52dbb51ffa0c8b7b22b95234fcc927db02e1cc1e1137c5d1244700011cfd069db19cab3ee365420a39d5851190f8d2f138d251e51ee73627f61ec44cc14c4f33c6b944ecd0556963b42af8a27ee66b695cff97cade46003d489a1a76b93d6d157e7348d0672fe32dd83e510634cc5806cb0dbe2177325fefdb9c0e57536c152767045c9cc509a936362d40ffe9922994e6f8c6c8164e891f62dae4eac74192d3dcdae3ce1ba9ff3ce529423faf73d5abbffac4d63db5d30c0085da500e90371f656f885478c1879d78771d69fd1a97185ecb3be4889ee08f236d8a8162069ea65fa7bbeea4ce46e5095531e6efcebf5277b8bb3454689617c6ff6b8690e4329b7dba8794d3f4380fb1117b84eb62a56a37a6d27abf55b87e7661262aa091e46f1caf8c61ee401b9a6e17716a57205bb3a155db61eeefb5a262d7895e28d4a2993049ec9ccc7f9319f22bc8ab034f2d9b613b23ced18de75c636d10980c58826b87948ff955ae4ab90e9e38acf008514b912363873c6e0d32832cd0346babfd9811f15d5c7e06db91489639cbab6fa182ac3f0fae8d6eaa0e41e97b4baf098e71d83a8434ea5f72848c290acab16e2259aeca84b1f72202479222c7a09e986821fbecc3ed95b326816a1f186856be930db4720082cb3092f2eb0c032ec8a964a2ad4ab7feb6629bb3da23dc580ee7a388ab7dca69b0ab9f504aa3775c72c1c1eec84c047e6fe89075850f5107ed28b5738cb31cff7c5a6f4c1aa3c6e7836c6c4cab673489f995d0690b1d866d162cb0aad9c52c2244ab5b46edd60d841bb70cef03a32cbeb4ce3d4799490607097b446b5f81aaec3f4b2440ee6c589d04f89a7f76175a1dda5d080916b5a10c623333854c53b2a1301a7f6e010fa055a9f6a602e73c6147ed7e784708083e612c3e9c356a62d77c43b42ed1af0de3fa17fba2673bf02be003f7d15f39398cf9311a72eb717004637bea9cba1fa7a0c4081e83a0ccf79aebe0db4fdb85e329fc6cf79f342eb90d3a1ff4a3011e78776cd56be6fb11110ec58c7466c9202b0bedc0f13e4a9b7412cd4d3f81fe8ebf0da39aa0ba80638e4ce512"}}, {0x0, "7279f77505aa4757c39e4f37a221db1e91676635cfd7cd7f56ffa4fbd7ce20fd78b9e64a459603a35ebffc6dea5435cc4ad19852b486fa7f006a5a11c5a4ab59575490cc596a15c3307ed75aee0dd308561895a8698fb0258c168c41fa85eb98574423db76ed923b21bf9c333783a8b39c76baf64f63"}}, 0x0, 0x1004, 0x0, 0x1}, 0x20)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=""/240, &(0x7f0000000300)=0xf0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000001740)=0xc)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x2000005)
flock(r2, 0x1)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000480)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="eba2a7882f095af51a5d472c6fda058cf0b114f4687a703bb62fb29f59a0b5d5c4d021db86397137eda64715ff17e86787f4d35312f0386d674ede93790eefaaa29be78c961e26a5666e4556e13ae4bbf76b716e4146c51956009640cb918cfc2a67c1fee98e378ab0b8c2b9cf1f7a90b3af", 0x72}], 0x1, 0x0, 0x0, 0x811}, 0x4000040)
flock(0xffffffffffffffff, 0xa)
flock(r1, 0x9)
ioctl$TIOCCBRK(r3, 0x5428)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
fcntl$setpipe(r2, 0x407, 0xe1)

[  469.383644] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

[  469.477785] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  469.502601] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

12:10:45 executing program 3:
r0 = socket$inet(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0)

[  469.635857] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  469.663646] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  469.670647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  469.699102] ptrace attach of "/root/syz-executor4"[18111] was attempted by "/root/syz-executor4"[18115]
[  469.846535] print_req_error: I/O error, dev loop5, sector 768
[  469.941174] print_req_error: I/O error, dev loop5, sector 0
[  469.947180] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  469.955085] print_req_error: I/O error, dev loop5, sector 8
[  469.960945] Buffer I/O error on dev loop5, logical block 1, lost async page write
[  469.968777] print_req_error: I/O error, dev loop5, sector 16
[  469.974767] Buffer I/O error on dev loop5, logical block 2, lost async page write
[  469.982581] print_req_error: I/O error, dev loop5, sector 24
[  469.988565] Buffer I/O error on dev loop5, logical block 3, lost async page write
[  469.996436] print_req_error: I/O error, dev loop5, sector 32
[  470.002334] Buffer I/O error on dev loop5, logical block 4, lost async page write
[  470.010050] print_req_error: I/O error, dev loop5, sector 40
[  470.016098] Buffer I/O error on dev loop5, logical block 5, lost async page write
[  470.023948] print_req_error: I/O error, dev loop5, sector 48
[  470.029796] Buffer I/O error on dev loop5, logical block 6, lost async page write
12:10:46 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0xfffffff5, 0x0, 0x8}}}}}}, 0x0)

12:10:46 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

[  470.037666] print_req_error: I/O error, dev loop5, sector 56
[  470.043805] Buffer I/O error on dev loop5, logical block 7, lost async page write
[  470.051533] print_req_error: I/O error, dev loop5, sector 64
[  470.057486] Buffer I/O error on dev loop5, logical block 8, lost async page write
[  470.065289] Buffer I/O error on dev loop5, logical block 9, lost async page write
[  470.153635] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:47 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)

12:10:47 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)

12:10:47 executing program 3:
socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3)
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
pipe(0x0)
tkill(r1, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r2 = dup(r0)
r3 = dup2(0xffffffffffffffff, r0)
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r3)
tkill(r1, 0x1000000000016)

12:10:47 executing program 0:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002)
fchdir(r1)

12:10:47 executing program 5:
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpgid(0xffffffffffffffff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000340))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x9, 0xfffffffffffeffff, 0x1ff, 0x6, 0x563b, 0x4, 0x8, 0x8000, 0x0, 0x7ff})
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000740)={{0x2, 0x0, 0x400, 0x0, 0x6}, 0x20})
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x20000001, 0x0, 0x0)
shutdown(r5, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x98, r6, 0x320, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3a}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x716}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0)
splice(r5, 0x0, r1, 0x0, 0xab11, 0x0)

12:10:47 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf74, 0xf8c, 0x5, {"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"}}, {0x0, "7279f77505aa4757c39e4f37a221db1e91676635cfd7cd7f56ffa4fbd7ce20fd78b9e64a459603a35ebffc6dea5435cc4ad19852b486fa7f006a5a11c5a4ab59575490cc596a15c3307ed75aee0dd308561895a8698fb0258c168c41fa85eb98574423db76ed923b21bf9c333783a8b39c76baf64f63"}}, 0x0, 0x1004, 0x0, 0x1}, 0x20)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=""/240, &(0x7f0000000300)=0xf0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000001740)=0xc)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x2000005)
flock(r2, 0x1)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000480)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="eba2a7882f095af51a5d472c6fda058cf0b114f4687a703bb62fb29f59a0b5d5c4d021db86397137eda64715ff17e86787f4d35312f0386d674ede93790eefaaa29be78c961e26a5666e4556e13ae4bbf76b716e4146c51956009640cb918cfc2a67c1fee98e378ab0b8c2b9cf1f7a90b3af", 0x72}], 0x1, 0x0, 0x0, 0x811}, 0x4000040)
flock(0xffffffffffffffff, 0xa)
flock(r1, 0x9)
ioctl$TIOCCBRK(r3, 0x5428)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
fcntl$setpipe(r2, 0x407, 0xe1)

[  471.034856] ptrace attach of "/root/syz-executor4"[18152] was attempted by "/root/syz-executor4"[18162]
[  471.035419] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  471.092701] input: syz1 as /devices/virtual/input/input10
[  471.124576] input: syz1 as /devices/virtual/input/input11
12:10:47 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)

12:10:47 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00')
fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00'}, &(0x7f00000002c0)='/\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\xaa\xd9U\xa3\xc9?\x9d$\x8bF\xa7\xc9\x9e\xb3[@k\xf9\x18\xff\x01s\x9eV\x18{-\xb8\xf1\aD$tRq\x06 B\xfb8\b\x18n\n\x83q2\xf9\x10\x8cX0s\xa4\xca\x94\xb3\xe4\xe5\x87\x17\xfe+e\x9f\xa3\x90<{s\xbdf\xb8?^\xcc\nsa%x\x96\x88?\x1bC\xffN\xc0\xa1\xe36\xb9/pTa\xaf\v`\x82Zx4\xff\xd0\xa73\x9d\x85\xc5\x1b\x8d\xb7\xb4\xc0\xe4\xf4\tS\xdd-\x9f!\x10\xf0L\x9f\xdf\x84\x89\xea\xa9\x96', 0xff7a, 0x0)

[  471.310688] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:47 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)

12:10:47 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00')
flistxattr(r0, 0x0, 0x0)

12:10:47 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

12:10:47 executing program 3:
socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3)
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
pipe(0x0)
tkill(r1, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r2 = dup(r0)
r3 = dup2(0xffffffffffffffff, r0)
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r3)
tkill(r1, 0x1000000000016)

12:10:47 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[  471.542222] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  471.703744] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, 0xe8)
r0 = socket$nl_generic(0xa, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2)

[  471.754870] input: syz1 as /devices/virtual/input/input12
[  471.814738] input: syz1 as /devices/virtual/input/input13
12:10:47 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:48 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00')
fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00'}, &(0x7f00000002c0)='/\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\xaa\xd9U\xa3\xc9?\x9d$\x8bF\xa7\xc9\x9e\xb3[@k\xf9\x18\xff\x01s\x9eV\x18{-\xb8\xf1\aD$tRq\x06 B\xfb8\b\x18n\n\x83q2\xf9\x10\x8cX0s\xa4\xca\x94\xb3\xe4\xe5\x87\x17\xfe+e\x9f\xa3\x90<{s\xbdf\xb8?^\xcc\nsa%x\x96\x88?\x1bC\xffN\xc0\xa1\xe36\xb9/pTa\xaf\v`\x82Zx4\xff\xd0\xa73\x9d\x85\xc5\x1b\x8d\xb7\xb4\xc0\xe4\xf4\tS\xdd-\x9f!\x10\xf0L\x9f\xdf\x84\x89\xea\xa9\x96', 0xff7a, 0x0)

12:10:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0xff51)
mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070")
mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, r0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

12:10:49 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:49 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x18)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c1f023c126285719070")

12:10:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070")
unshare(0x4000400)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20)

12:10:49 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x6124)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x14)
socket$inet_udplite(0x2, 0x2, 0x88)

12:10:49 executing program 3:
socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3)
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
pipe(0x0)
tkill(r1, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r2 = dup(r0)
r3 = dup2(0xffffffffffffffff, r0)
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r3)
tkill(r1, 0x1000000000016)

[  473.649678] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:49 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:49 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)

[  473.822355] sctp: [Deprecated]: syz-executor2 (pid 18246) Use of int in maxseg socket option.
[  473.822355] Use struct sctp_assoc_value instead
[  473.930604] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@broadcast, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, 0xe8)
r0 = socket$nl_generic(0xa, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2)

12:10:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

[  474.113710] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:50 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x6124)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x14)
socket$inet_udplite(0x2, 0x2, 0x88)

12:10:50 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@dev, r2}, 0xffffffffffffff0d)
sendmmsg(r0, &(0x7f00000092c0), 0x41, 0x0)

12:10:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

[  474.297077] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  474.523078] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  474.560050] sctp: [Deprecated]: syz-executor2 (pid 18283) Use of int in maxseg socket option.
[  474.560050] Use struct sctp_assoc_value instead
12:10:50 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffad, 0x0, 0x0, 0xffffffffffffffa6)

12:10:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0xffffffffffffff0d)

12:10:50 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14)

12:10:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:50 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x6124)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x14)
socket$inet_udplite(0x2, 0x2, 0x88)

[  474.797156] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:50 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000006c40)=[{{&(0x7f0000000480)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0xc, 0x117}], 0xc}, 0x14}], 0x1, 0x0)

12:10:50 executing program 5:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x3f)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6, 0x0, 0x0, 0x5dc, 0x0, 0x50}, 0x98)

12:10:51 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:51 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:51 executing program 3:

12:10:51 executing program 1:

12:10:51 executing program 5:

[  475.317909] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:51 executing program 2:

12:10:51 executing program 0:

12:10:51 executing program 1:

12:10:51 executing program 3:

12:10:51 executing program 5:

12:10:51 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:51 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

[  475.785706] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:51 executing program 3:

12:10:51 executing program 0:

12:10:51 executing program 5:

12:10:52 executing program 1:

[  475.937769] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:52 executing program 2:

12:10:52 executing program 5:

12:10:52 executing program 0:

12:10:52 executing program 3:

12:10:52 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:52 executing program 1:

12:10:52 executing program 2:

12:10:52 executing program 0:

[  476.369909] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  476.405940] ptrace attach of "/root/syz-executor4"[18363] was attempted by "/root/syz-executor4"[18364]
12:10:52 executing program 1:

12:10:52 executing program 5:

12:10:52 executing program 3:

12:10:52 executing program 0:

12:10:52 executing program 2:

12:10:52 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(0x0, 0x800, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:52 executing program 1:

12:10:52 executing program 3:

12:10:52 executing program 0:

12:10:52 executing program 5:

12:10:52 executing program 2:

12:10:53 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:53 executing program 1:

12:10:53 executing program 3:

12:10:53 executing program 5:

12:10:53 executing program 0:

12:10:53 executing program 2:

[  477.103536] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:53 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:53 executing program 3:

12:10:53 executing program 5:

12:10:53 executing program 2:

12:10:53 executing program 1:

[  477.409113] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:53 executing program 0:

12:10:53 executing program 3:

12:10:53 executing program 2:

12:10:53 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:53 executing program 5:

12:10:53 executing program 1:

12:10:53 executing program 0:

12:10:53 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

[  477.753202] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  477.780109] ptrace attach of "/root/syz-executor4"[18424] was attempted by "/root/syz-executor4"[18425]
12:10:53 executing program 3:

12:10:53 executing program 2:

12:10:54 executing program 1:

12:10:54 executing program 0:

12:10:54 executing program 5:

[  477.950732] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:54 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:54 executing program 3:

12:10:54 executing program 2:

12:10:54 executing program 1:

12:10:54 executing program 5:

12:10:54 executing program 0:

[  478.273065] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:54 executing program 2:

12:10:54 executing program 3:

12:10:54 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:54 executing program 1:

12:10:54 executing program 3:

12:10:54 executing program 0:

12:10:54 executing program 2:

12:10:54 executing program 5:

12:10:54 executing program 3:

12:10:54 executing program 0:

12:10:54 executing program 2:

12:10:54 executing program 1:

12:10:54 executing program 5:

12:10:54 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:55 executing program 3:

12:10:55 executing program 0:

12:10:55 executing program 1:

12:10:55 executing program 5:

12:10:55 executing program 2:

12:10:55 executing program 0:

12:10:55 executing program 3:

12:10:55 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:55 executing program 1:

12:10:55 executing program 2:

12:10:55 executing program 5:

12:10:55 executing program 3:

12:10:55 executing program 0:

12:10:55 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:55 executing program 1:

12:10:55 executing program 5:

12:10:55 executing program 2:

12:10:55 executing program 3:

[  479.789135] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:55 executing program 1:

12:10:55 executing program 0:

12:10:56 executing program 5:

12:10:56 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:56 executing program 2:

12:10:56 executing program 3:

12:10:56 executing program 1:

[  480.115122] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:56 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:56 executing program 5:

12:10:56 executing program 3:

12:10:56 executing program 0:

12:10:56 executing program 2:

[  480.324499] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:56 executing program 1:

12:10:56 executing program 0:

12:10:56 executing program 5:

12:10:56 executing program 2:

12:10:56 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:56 executing program 3:

12:10:56 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

[  480.681917] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:56 executing program 0:

12:10:56 executing program 1:

12:10:56 executing program 2:

12:10:56 executing program 3:

12:10:56 executing program 5:

[  480.857803] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:57 executing program 2:
r0 = socket$kcm(0xa, 0x6, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000008c0)={0x5, 0x70, 0x0, 0x0, 0x1, 0x1b11, 0x0, 0xe59, 0x200, 0xc, 0x0, 0x100000001, 0x3, 0x1, 0x8, 0xed5e, 0x2, 0x8001, 0x0, 0x7fffffff, 0x10000, 0x6, 0x0, 0x3, 0x0, 0x5, 0x3ff, 0x8, 0x1, 0xed, 0x0, 0x9, 0xff, 0x0, 0x9, 0x1, 0x7, 0x3, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x9}, 0x8, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000bc0)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05\xb6\xd4\xa2\v\x05\x80\x90D\xc8S\x9e\xb6\xc5\x82\x8a\xf4s\xb0\xabR\x91e\x87c:\x88\xd9\xcf&Z\xdb\xea\x1c[\xdb\xdd<~%\xd76\xc0~CsM\x96\x86\xde\xc8\xda{\xe7\xa9\x06\xb0')
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000280)={&(0x7f00000012c0)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20004010}, 0x0)
getpid()
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000680), 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x0, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=ANY=[]}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f00)=@can, 0x80, &(0x7f0000000f80)}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="2d70696473202f70696473202f72646d61202b6d656d6f7279202d6d656d6f7279202d6d656d6f7279202d696f202d72646d61ecc80619e34120"], 0x3a)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000600))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000700)={r2})
socket$kcm(0xa, 0x2, 0x11)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x8, 0x6, 0x5, &(0x7f0000000080))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = gettid()
perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x1, 0x9, 0x7ff, 0x400000000, 0x0, 0x4, 0x10, 0xc, 0x0, 0x401, 0x72, 0x3, 0x6, 0x40, 0xffffffffffffffc1, 0x7655, 0x2373, 0x1, 0x100000000, 0x0, 0x9, 0x40000000, 0x401, 0x0, 0x80000001, 0x101, 0x7, 0x7f, 0x8b3, 0x3ff, 0x5, 0x9, 0x7e, 0x1, 0x3, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x1cc, 0x1}, 0x0, 0x7de, 0x7, 0x0, 0x7, 0x2, 0x100}, r6, 0xd, r1, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\xfd\xfd\xff\xff\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
perf_event_open(0x0, 0x0, 0x1, r3, 0x0)
perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90100, 0x0, 0x0, 0x0, 0x9, 0x57, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f, 0x0, 0x67, 0x0, 0x200000000000000, 0x0, 0x80000001, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x100000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x4, 0x5, 0xec1, 0x7}, 0x0, 0x0, r4, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0)

12:10:57 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:10:57 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f00000023c0)=ANY=[@ANYBLOB], 0x0}, 0x20)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002380)={&(0x7f0000002340)='./file0\x00', 0x0, 0x10}, 0x10)

12:10:57 executing program 0:
socketpair(0x0, 0x0, 0x310, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x5, 0x30000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x81, 0x0, 0x5, 0x0, 0x7f, 0x5, 0x1ff, 0x0, 0x0, 0x445, 0x0, 0x0, 0x9, 0x5, 0x0, 0x1c00000000, 0x0, 0x0, 0x1000, 0xb92, 0x0, 0x7ff, 0x64e, 0x0, 0x0, 0xf83, 0x0, @perf_bp={0x0, 0x8}, 0x10810, 0x0, 0x0, 0x0, 0x9c3, 0x2, 0x2}, 0x0, 0x0, r0, 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xf, 0xffffffffffffffff, 0x80)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r1, 0x0, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c800)
write$cgroup_int(r2, &(0x7f0000000000), 0x335)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'yam0\x00\x00\x00\x00\xf5\xff\xff\xff\x00\x00\xff\xff', 0x400})
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x0)
gettid()
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x400, 0x81, 0x40, 0x8, 0x0, 0x7, 0x2040, 0x2, 0x7, 0x6ae5, 0x3ff, 0x0, 0x9, 0xca01, 0x3, 0x0, 0x5, 0x100000001, 0x3, 0x2, 0x3, 0x30, 0x0, 0x101, 0x7, 0x3f, 0x0, 0xd4, 0x3671, 0x100000001, 0x0, 0x1, 0x4, 0x6, 0x0, 0xe4f, 0x0, 0x6, 0x5, @perf_config_ext={0x1, 0xbb}, 0x4020, 0x6, 0x1, 0xf, 0x0, 0xfff, 0x2}, 0x0, 0xc, r3, 0x8)
close(r2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x20000001)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x0, 0x2, 0x0, 0x20, 0xffffffffffffff9c}, 0x2c)

[  481.122169] device lo entered promiscuous mode
12:10:57 executing program 5:
socketpair(0x22, 0x0, 0x8000, &(0x7f0000000000))

12:10:57 executing program 3:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000001ec0)={&(0x7f0000001900)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0)

[  481.189205] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:10:57 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x800, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
lstat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[  481.250211] ptrace attach of "/root/syz-executor4"[18580] was attempted by "/root/syz-executor4"[18583]
[  481.376488] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
[  481.384704] ptrace attach of "/root/syz-executor4"[18596] was attempted by "/root/syz-executor4"[18597]
12:10:57 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x10, 0x4, 0x13, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), 0x0}, 0x20)

12:10:57 executing program 5:

12:10:57 executing program 3:

12:10:57 executing program 4:

12:10:57 executing program 3:

12:10:58 executing program 2:

12:10:58 executing program 5:

12:10:58 executing program 3:

12:10:58 executing program 0:

12:10:58 executing program 1:

12:10:58 executing program 4:

12:10:58 executing program 5:

12:10:58 executing program 3:

12:10:58 executing program 4:

12:10:58 executing program 5:

12:10:58 executing program 2:

12:10:58 executing program 0:

12:10:58 executing program 1:

12:10:59 executing program 5:

12:10:59 executing program 3:

12:10:59 executing program 4:

12:10:59 executing program 2:

12:10:59 executing program 0:

12:10:59 executing program 1:

12:10:59 executing program 3:

12:10:59 executing program 5:

12:10:59 executing program 4:

12:10:59 executing program 0:

12:10:59 executing program 2:

12:10:59 executing program 1:

12:10:59 executing program 3:

12:10:59 executing program 0:

12:10:59 executing program 4:

12:10:59 executing program 2:

12:10:59 executing program 5:

12:10:59 executing program 1:

12:10:59 executing program 3:

12:10:59 executing program 4:

12:10:59 executing program 2:

12:10:59 executing program 5:

12:11:00 executing program 0:

12:11:00 executing program 1:

12:11:00 executing program 4:

12:11:00 executing program 2:

12:11:00 executing program 3:

12:11:00 executing program 5:

12:11:00 executing program 4:

12:11:00 executing program 0:

12:11:00 executing program 1:

12:11:00 executing program 2:

12:11:00 executing program 5:

12:11:00 executing program 0:

12:11:00 executing program 3:

12:11:00 executing program 4:

12:11:00 executing program 1:

12:11:00 executing program 2:

12:11:00 executing program 0:

12:11:00 executing program 4:

12:11:00 executing program 5:

12:11:00 executing program 2:

12:11:00 executing program 3:

12:11:00 executing program 1:

12:11:01 executing program 4:

12:11:01 executing program 0:

12:11:01 executing program 5:

12:11:01 executing program 3:

12:11:01 executing program 2:

12:11:01 executing program 1:

12:11:01 executing program 2:

12:11:01 executing program 0:

12:11:01 executing program 4:

12:11:01 executing program 3:

12:11:01 executing program 5:

12:11:01 executing program 2:

12:11:01 executing program 3:

12:11:01 executing program 1:

12:11:01 executing program 0:

12:11:01 executing program 4:

12:11:01 executing program 2:

12:11:01 executing program 5:

12:11:01 executing program 4:

12:11:01 executing program 1:

12:11:02 executing program 3:

12:11:02 executing program 0:

12:11:02 executing program 4:

12:11:02 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)

12:11:02 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00\x1e\x00', 0x800201e})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@dev, 0x0, r2})

12:11:02 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r3 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$get_security(0x11, r3, &(0x7f0000000240)=""/185, 0xb9)
ftruncate(r2, 0x10099b7)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
sendfile(r0, r2, 0x0, 0x8000fffffffe)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

12:11:02 executing program 0:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000004c0)='ramfs\x00', 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
umount2(&(0x7f0000003340)='./file0\x00', 0xc)

12:11:02 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c)
r1 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

12:11:02 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x100000002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xffffffffffff8001}, {0x6}]}, 0x10)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

12:11:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:02 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x2000000000008040, 0x0)
fchmod(r0, 0x15)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00')
syncfs(r2)

12:11:02 executing program 4:
clone(0x2122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2009ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x882c0600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x803, 0xb58)
syz_open_procfs(0x0, 0x0)
exit(0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

12:11:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:02 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

12:11:02 executing program 5:
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000140)='logon\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0)

12:11:02 executing program 2:
unshare(0x2000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100000000200, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xa3, 0x0, &(0x7f0000000400)="5ac41343ee9f2ba0da59a926e33cfc1b407602d832192c9f9e742f7eef2f4f9a22e2984265d4e1c1ec687e8b68bff88acd8e2d1f3bc34baddc1318322ddc02b81ff66e93e700c1c07a4b38e5e7b08fc590d7e30b96bcfca6133706b8535e3803b5bd167ae7b757b64ae944c1495c093dc7eee660e1706df1619cb7f5176b93526a6a13a169d5af4aa22f3fb8784780604521871f2d0879a26885d27d9b6a795840af35", 0x0, 0x2}, 0x28)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
accept4(r0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)

12:11:02 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
close(r0)

12:11:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:03 executing program 3:
mknod(&(0x7f0000000ec0)='./file0\x00', 0x800000409, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)

12:11:03 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2000000000002e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

[  486.947458] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
12:11:03 executing program 4:
clone(0x2122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2009ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x882c0600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x803, 0xb58)
syz_open_procfs(0x0, 0x0)
exit(0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

12:11:03 executing program 0:
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

12:11:03 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000040), 0x10)
sendto$inet(r0, &(0x7f00000000c0)='_', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14)
recvfrom$inet(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x2, 0x0, 0xfffffffffffffe33)

12:11:03 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:03 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00\xb0\x90Z.\xa4I\xdarKN\xf3\xd1\x81Z\x01E\xd4\vu\xf5|.|\xddM`\xcfS\x14\a\x18\x8fC\x84,\xad\x96\f_\xcd\xe0-k\xaa\x02\x8f\x9b\x1d\xad)\xe7\x1eH)\xb5\xf8\xa7\xaf\xe9\x11\xdd\xe9\b\x1b8n\xaf\xd4\xa2j5\x04K\x01\'6^k\xe8\"td\xa4\x14\xf4\x01\xf6\xfc\x93\x9aX\x9c\xf6\xfc\xfcB\x93\x16\x93\x16l\x8eE\x12*\xddM\xd78\xea\x9e\xcaE\"$r*\x01\xcc\x981', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$cgroup_pid(r1, &(0x7f0000000280), 0x8)

12:11:03 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc))
clock_gettime(0x0, &(0x7f0000000300)={0x0, <r1=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f00000001c0)={0x0, r1+30000000}, &(0x7f00000002c0))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380))

12:11:03 executing program 2:
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000040))
rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100))
ptrace(0x10, r0)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000340))
ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000000))

12:11:03 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f0000000800), 0x1000)

12:11:03 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]})

12:11:03 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:03 executing program 5:
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x27e, 0x0)

12:11:03 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(0x0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)

12:11:03 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:03 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e})
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x14)
close(r1)
close(r0)

12:11:03 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:04 executing program 5:
clone(0x2122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2009ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x882c0600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6(0xa, 0x803, 0xb58)
syz_open_procfs(0x0, 0x0)
exit(0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000000000005)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

12:11:04 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:04 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x81)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

12:11:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)

12:11:04 executing program 3:
r0 = mq_open(&(0x7f0000000100)='user#vboxnet1\x00', 0x0, 0x0, 0x0)
mq_getsetattr(r0, &(0x7f0000000040), 0x0)

12:11:04 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:04 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x81)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

12:11:04 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x4001, 0x0)

12:11:04 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000000000004)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190020ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1)

12:11:04 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x1, 0x0)

12:11:04 executing program 2:
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "e11661", 0x14, 0x0, 0x0, @empty, @ipv4={[], [], @loopback}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

12:11:04 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:04 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c)

12:11:05 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:05 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000003c00))
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x200)
tkill(r1, 0x15)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
add_key$keyring(&(0x7f0000000500)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

12:11:05 executing program 3:
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2)
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000a40)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f00000002c0)='./file0\x00', 0x41, 0x0)

12:11:05 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000068cffc)=0x1, 0x4)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$P9_RXATTRCREATE(r1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
execve(0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000640)=[0x0])
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'bond_slave_0\x00'}, 0x18)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
setsockopt$sock_int(r0, 0x1, 0x80000000009, &(0x7f0000f0fffc)=0x77a, 0x4)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f00000001c0)=0x54)

12:11:05 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x81)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

[  489.219898] IPVS: stopping master sync thread 18955 ...
[  489.257232] IPVS: stopping master sync thread 18958 ...
[  489.259680] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0
12:11:05 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x81)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

12:11:05 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:05 executing program 4:
clock_nanosleep(0xe799b8e9dc64fc34, 0x0, &(0x7f00000008c0)={0x0, 0x1c9c380}, 0x0)

12:11:05 executing program 2:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000200), 0xffffffffffffff46, 0x0, 0x0, 0x0)
splice(r3, 0x0, r0, 0x0, 0x80000000, 0x0)

12:11:05 executing program 3:
setns(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
io_setup(0x4, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}])
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)

[  489.749254] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
12:11:05 executing program 4:
r0 = socket$kcm(0x2b, 0x200000000000001, 0x0)
sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x20000054)
sendmsg$kcm(r0, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0)

12:11:05 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)

12:11:06 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000480)={0x1, 0x2, [@dev={[], 0x29}, @broadcast]})
recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/148, 0x94}, 0x0)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0)
ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000140))
close(r2)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'veth1_to_bridge\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N')
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x0, 0x2, 0x1, 0x2, r6, 0x9767}, 0x2c)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801})
recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x5, 0x300)
r7 = socket$kcm(0xa, 0x522000000003, 0x11)
sendmsg$kcm(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000540)="4399634c147ca175aa7ad27f5041a31e857c3cbf8d1be5861ad671a5786dece2e6a1e229490f58e38c2304c1afd0d56d5f3ec9df5c55c4d3bdc849574e5763924bbfdcfe3a8669ce036ebf42ca0b6f6e6dfa15f72758c4e99c72a62f6d9a8b44d6b6430a2214f44873da0f98d08132f2f6926f8fe7f1bd9bc521881c64457a37120fbe61d14a5e7d2f6053d8224c8c91a53184d6e12b858a85fb27de922cab37b26c3e6560cd35bd061ccd43386ab388e6761bd3fab146c41cf46b7359e9421c96cdd8fd678e56dd6156e0922999287f991d1fc1f95663e52f45b10e4a0c56cbc031a16cd1f46328bc3c"}, 0x10)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0)

12:11:08 executing program 0:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
write$binfmt_elf64(r0, 0x0, 0x0)

12:11:08 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(0x0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)

12:11:08 executing program 4:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c)
close(r1)

12:11:08 executing program 5:
syz_genetlink_get_family_id$net_dm(&(0x7f0000001340)='NET_DM\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2000000000000009}, 0x49)
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001200)={r0, &(0x7f00000010c0), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f000051e000)={r0, 0x0, 0x0}, 0x20)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000001500))
openat$zero(0xffffffffffffff9c, &(0x7f0000001240)='/dev/zero\x00', 0x80000, 0x0)

12:11:08 executing program 2:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000200), 0xffffffffffffff46, 0x0, 0x0, 0x0)
splice(r3, 0x0, r0, 0x0, 0x80000000, 0x0)

12:11:08 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2000000000000009}, 0x49)
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f000051e000)={r0, 0x0, 0x0}, 0x20)

[  492.140116] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  492.155304] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
12:11:08 executing program 4:
openat(0xffffffffffffffff, &(0x7f00000000c0)='/', 0x180003, 0x10)

12:11:08 executing program 1:
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(0x0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)

12:11:08 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x180005, 0xcc)

12:11:08 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x1a9)

12:11:08 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
fchmod(r1, 0x0)
r2 = getuid()
fchownat(0xffffffffffffffff, 0x0, r2, 0x0, 0x0)
pipe(0x0)

12:11:08 executing program 1:
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)

12:11:08 executing program 4:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat(r0, &(0x7f0000000000)='/', 0x0, 0x0)

12:11:08 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x180004, 0x0)

12:11:08 executing program 0:

12:11:08 executing program 5:
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
memfd_create(0x0, 0x20)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
unshare(0x0)
open$dir(0x0, 0x80004, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x7fffffffe, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
socketpair(0x1, 0x0, 0x1, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401)
ftruncate(r0, 0x2008200)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000680)='./bus\x00', 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113)

12:11:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/11, 0xb)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

12:11:09 executing program 3:
syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

12:11:09 executing program 0:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet6(0xa, 0x40000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)

12:11:09 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x20)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
unshare(0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000000c0))
open$dir(&(0x7f0000000040)='./file0\x00', 0x80004, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480))
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x1)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401)
ftruncate(r3, 0x2008200)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000680)='./bus\x00', 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113)

12:11:09 executing program 1:
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)

12:11:09 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000000c0))
open$dir(&(0x7f0000000040)='./file0\x00', 0x80004, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
socketpair(0x0, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x1)
ftruncate(r1, 0x2008200)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)
creat(&(0x7f0000000680)='./bus\x00', 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0)

[  493.091833] device lo entered promiscuous mode
12:11:09 executing program 3:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x20)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
unshare(0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000000c0))
open$dir(&(0x7f0000000040)='./file0\x00', 0x80004, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
close(r3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480))
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x1)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401)
ftruncate(r5, 0x2008200)
r6 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000680)='./bus\x00', 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113)

12:11:09 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x20)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
unshare(0x0)
r1 = getpid()
sched_setscheduler(r1, 0x0, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x80004, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
close(r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480))
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x1)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401)
ftruncate(r4, 0x2008200)
r5 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000680)='./bus\x00', 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113)

12:11:09 executing program 1:
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)

12:11:09 executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')

12:11:09 executing program 1:
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0)

12:11:09 executing program 1:
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)

[  493.870895] Y­4��`Ò˜: renamed from lo
[  494.050038] device lo entered promiscuous mode
12:11:10 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0x7f8)

12:11:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00')
dup3(r0, r1, 0x0)

12:11:10 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000000c0))
open$dir(&(0x7f0000000040)='./file0\x00', 0x80004, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
socketpair(0x0, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x1)
ftruncate(r1, 0x2008200)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)
creat(&(0x7f0000000680)='./bus\x00', 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0)

[  494.822883] Y­4��`Ò˜: renamed from lo
[  494.864998] device lo entered promiscuous mode
[  495.097670] Y­4��`Ò˜: renamed from lo
12:11:11 executing program 4:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
rmdir(&(0x7f0000000240)='./file0\x00')

12:11:11 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

12:11:11 executing program 2:
creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})

12:11:11 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)

12:11:11 executing program 5:
write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003)
preadv(0xffffffffffffffff, &(0x7f0000002680)=[{0x0}], 0x1, 0x0)

12:11:11 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)

12:11:11 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
nanosleep(&(0x7f0000000000), 0x0)

12:11:11 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

12:11:11 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

12:11:11 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = getpgrp(0x0)
capset(&(0x7f0000000100)={0x20071026, r1}, 0x0)

[  495.590430] audit: type=1326 audit(1546085471.643:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19141 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:11:11 executing program 0:
mknod(&(0x7f0000000000)='./bus\x00', 0x80008002, 0x28ac)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x9, 0x7, 0x9, 0x6, 0x8, 0x100000001, 0xa7, 0x5}, &(0x7f0000000140))

[  495.760084] audit: type=1326 audit(1546085471.813:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19155 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  495.782482] capability: warning: `syz-executor3' uses deprecated v2 capabilities in a way that may be insecure
12:11:11 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
wait4(0x0, 0x0, 0x0, 0x0)

12:11:12 executing program 3:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/4096)

12:11:12 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)

12:11:12 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)

[  496.080840] audit: type=1326 audit(1546085472.133:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19178 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:11:12 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
syslog(0x0, 0x0, 0x0)

[  496.252019] audit: type=1326 audit(1546085472.303:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19141 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:11:12 executing program 5:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)

[  496.284218] audit: type=1326 audit(1546085472.343:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19190 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:11:12 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
r3 = syz_open_procfs(r2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x0, 0x3, 0x1})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3)
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f00000001c0), 0xfffffef3)
read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffef6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = memfd_create(&(0x7f0000000380)='\x00', 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, <r9=>0x0}, &(0x7f0000000480)=0xc)
setfsuid(r9)
poll(&(0x7f0000000540)=[{r0, 0x200}, {r4, 0x40}, {r0}], 0x3, 0x7d9)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000000c0))
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x0, "0f754ee708495822"})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/56)
ftruncate(r8, 0x1400001)
sendfile(r7, r8, &(0x7f0000000180)=0xf10001, 0xfffffdef)
write(r6, &(0x7f00000003c0)="f2788d033f5b38a94b898bf514a15e7df08843de0271bb1b2d50c2a9c0c829a83f0086779a2ecdbd0f86285e763c5cb3bd25619fa731ccea424f4e5c3d23180d44b1fabd244a31f61afc7d4ad196f8ddba2c12ac6fb42bac5eb2ddfeb89798fa49eb40", 0x63)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000700)=""/71, 0x47}, 0x80000000000000}], 0x1, 0x0, &(0x7f0000001b80)={0x0, 0x1c9c380})
renameat2(r4, 0x0, 0xffffffffffffffff, 0x0, 0x2)

12:11:12 executing program 2:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

12:11:12 executing program 5:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)

[  496.559681] audit: type=1326 audit(1546085472.613:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19155 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:11:12 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
futimesat(0xffffffffffffffff, 0x0, 0x0)

[  496.728167] audit: type=1326 audit(1546085472.783:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19220 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:11:12 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
membarrier(0x0, 0x0)

[  496.836077] audit: type=1326 audit(1546085472.883:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19227 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  496.905505] audit: type=1326 audit(1546085472.923:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19178 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:11:13 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3)
r2 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getpgid(0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x200000000, 'queue1\x00', 0x7fffffff})
write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0xfffffe36)
ioctl$TCSETSF(r1, 0x5437, 0x0)

[  497.002023] audit: type=1326 audit(1546085473.053:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19231 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:11:13 executing program 0:

12:11:13 executing program 0:

12:11:13 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
setreuid(0x0, 0x0)

12:11:13 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000000)='h', 0x1}], 0x1)

12:11:13 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
r3 = syz_open_procfs(r2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3)
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f00000001c0), 0xfffffef3)
read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffef6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = memfd_create(&(0x7f0000000380)='\x00', 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, <r9=>0x0}, &(0x7f0000000480)=0xc)
setfsuid(r9)
poll(&(0x7f0000000540)=[{r0, 0x200}, {r4, 0x40}, {r0}], 0x3, 0x7d9)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000000c0))
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x0, "0f754ee708495822"})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/56)
ftruncate(r8, 0x1400001)
sendfile(r7, r8, &(0x7f0000000180)=0xf10001, 0xfffffdef)
write(r6, &(0x7f00000003c0)="f2788d033f5b38a94b898bf514a15e7df08843de0271bb1b2d50c2a9c0c829a83f0086779a2ecdbd0f86285e763c5cb3bd25619fa731ccea424f4e5c3d23180d44b1fabd244a31f61afc7d4ad196f8ddba2c12ac6fb42bac5eb2ddfeb89798fa49eb40", 0x63)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000700)=""/71, 0x47}, 0x80000000000000}], 0x1, 0x0, &(0x7f0000001b80)={0x0, 0x1c9c380})
renameat2(r4, 0x0, 0xffffffffffffffff, 0x0, 0x2)

12:11:13 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
getrandom(0x0, 0x0, 0x0)

12:11:13 executing program 5:

12:11:14 executing program 2:

12:11:14 executing program 5:

12:11:14 executing program 2:

12:11:14 executing program 5:

12:11:14 executing program 3:

12:11:14 executing program 2:

12:11:14 executing program 5:

12:11:14 executing program 0:

12:11:14 executing program 3:

12:11:14 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00')

12:11:15 executing program 4:
mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x0, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(0x0, 0x0, 0x0)

12:11:15 executing program 2:

12:11:15 executing program 5:

12:11:15 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shutdown(r0, 0x0)

12:11:15 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0x7f8)

12:11:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x5)
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006)
write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846eab1a9d914b0695b16dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1a375b63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c128cf35ddf4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7912ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6692ceb4831b5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8297cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057288d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858ae38ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d294285497a42736454ccb62fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006)

12:11:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x5)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x0, 0x3f})
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006)

12:11:15 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x5)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x0, 0x3f})
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)

12:11:15 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
syz_open_pts(r0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000640)='threaded\x00', 0x9)
write(r2, &(0x7f0000000340), 0x10000014c)
socket$inet(0x10, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x2, "edb435aa6c503046"})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000340))
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
fcntl$getown(r0, 0x9)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:11:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x5)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x73c9, 0x3f})
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006)

12:11:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x2)

12:11:15 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
read(r0, 0x0, 0x0)

12:11:16 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
rmdir(&(0x7f0000000340)='./file0\x00')
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r1, r2, 0x0, 0x100000001)

12:11:16 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

[  500.106671] input: syz1 as /devices/virtual/input/input14
[  500.160831] input: syz1 as /devices/virtual/input/input15
12:11:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x5)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x73c9, 0x3f})
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846eab1a9d914b0695b16dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1a375b63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c128cf35ddf4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7912ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6692ceb4831b5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8297cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057288d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858ae38ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d294285497a42736454ccb62fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006)

12:11:16 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x80003)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
fadvise64(r2, 0x0, 0x0, 0x4)

12:11:16 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070007020000000000000000050000"], 0x10}}, 0x0)

12:11:16 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27})

12:11:16 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r1}, {r0}], 0x2, 0x4)

12:11:16 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000001500)=ANY=[@ANYBLOB="0400000000000000ddaa0000000000fcff00000000000000"])
ioctl$TIOCCONS(r1, 0x541d)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
openat$urandom(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/urandom\x00', 0x4000, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4)
pause()
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'U+', 0x3f}, 0x28, 0x3)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
mlock2(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140))
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000001540)={0x6, 0x1, 0xc06c, 0x2, 0x1246531}, 0xc)
perf_event_open(&(0x7f00000012c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r1, r3, 0x0, 0x8000fffffffe)

12:11:16 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00')
sendfile(r0, r0, &(0x7f0000000000)=0x12c, 0x4)

12:11:16 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"})

12:11:17 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070007020000000000000000050000"], 0x10}}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)

12:11:17 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0xe93}, 0x10)

12:11:17 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x4000000000001)
connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8)
sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0)

12:11:17 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000de2aa16dd70000000000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0)

12:11:17 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8)

12:11:17 executing program 5:
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff)
msgrcv(0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESOCT]]], 0x1, 0x0, 0xa4a3ad41a879dde8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@initdev, @in6=@dev}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8)

12:11:17 executing program 4:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000180)={'sy.', 0x1}, &(0x7f00000002c0)='\x81\x00\x92', 0xffffffffffffffff)
msgget(0x3, 0x0)
msgget$private(0x0, 0x98)
msgget(0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@initdev, @in6=@dev}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8)
connect(r0, 0x0, 0x0)
r1 = add_key(&(0x7f0000000240)='.request_key_auth\x00', 0x0, &(0x7f0000000640), 0x0, 0xfffffffffffffffb)
keyctl$get_security(0x11, r1, 0x0, 0x0)

12:11:17 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)=']ppp0\x00', 0xffffffffffffffff)

12:11:18 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB=']'], 0x1)
write(r1, &(0x7f0000000100), 0x1ede5)
accept(r0, 0x0, 0x0)

12:11:18 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:18 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0xa, 0x1, 0x0)
r2 = socket(0x0, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x3, 'lblcr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)

12:11:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="0a5c1f023c126285719070")
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f00000001c0)={'ip6_vti0\x00', 0x3001})

12:11:18 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="0a5c1f023c126285719070")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x11ffffcdd)
write$nbd(r2, &(0x7f00000001c0), 0x10)

[  502.220260] IPVS: ftp: loaded support on port[0] = 21
12:11:18 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000020b7050000000000006a0a00fe000000008500000012000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0xf000, 0xa1, 0x0, &(0x7f0000000800)="121d9b1531a30028000000000000d5acd1e550bb67224bd1b9308b23941a7794a956dad0b8c4a63df3ea1be3ed9ebf55247a0e7d1b67f224240000f4bcecf998c4f1fdead6538886773645c0d32ec2329a8a67917e9556114f704a60ca84979f0bcb1889bc979d40d3c7b3481f0d0672be5921e4ab0c8b46708866a6246aa5e9b9f16451d5a0d74baa263e463bbea90fce2c93aaba545fd24661f1ad1366aec685", 0x0, 0x6db8}, 0x28)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")

12:11:18 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x800800000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000006f00)=[{&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/4096, 0x1000}], 0x2}, 0x0)
recvmsg$kcm(r0, &(0x7f00000095c0)={0x0, 0x0, 0x0}, 0x0)

12:11:18 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="2300000019003ffe2a46f799e7ce00fe029ac2a001000000fc05007b74c71bf53e8025", 0x23}], 0x1}, 0x0)

12:11:18 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:18 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
exit(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getdents64(r0, &(0x7f0000000340)=""/57, 0x252)

[  502.755065] cgroup: fork rejected by pids controller in /syz4
12:11:18 executing program 4:
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000c86f88)={0x800000000002, 0x70, 0xca80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x1000, 0x0)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008810}, 0x4004)

12:11:18 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents(r1, &(0x7f0000000040)=""/63, 0x3f)
getdents64(r1, &(0x7f0000000080)=""/147, 0x93)

12:11:18 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
personality(0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000000141042, 0x0)
fallocate(r1, 0x1, 0x0, 0x10000103)

12:11:19 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:19 executing program 2:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0), 0xa)
write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7}, 0x7)

[  503.523473] : renamed from ip6_vti0
[  503.581168] IPVS: ftp: loaded support on port[0] = 21
12:11:19 executing program 0:
mkdirat(0xffffffffffffffff, 0x0, 0x0)
personality(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000000141042, 0x0)
fallocate(r1, 0x1, 0x0, 0x10000103)

12:11:19 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000005c0), 0xffffff3e, 0x1, 0x0, 0xfffffffffffffdbb)
connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc)

12:11:19 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
read(r1, 0x0, 0x0)

12:11:19 executing program 4:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00')
syz_genetlink_get_family_id$tipc2(0x0)
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002)
rmdir(&(0x7f0000000000)='./file0/../file0/file0\x00')

12:11:19 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000000141042, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="95", 0x1}], 0x1)

12:11:19 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)

[  503.786645] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
12:11:19 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents(r1, &(0x7f0000000200)=""/143, 0x29)
getdents(r1, &(0x7f0000000040)=""/63, 0x3f)
getdents64(r1, &(0x7f0000000080)=""/147, 0x93)

12:11:20 executing program 3:
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
unshare(0x400)
perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0)

12:11:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0)

12:11:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c)
socket$netlink(0x10, 0x3, 0x0)

12:11:20 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102005ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
exit(0x0)
read$FUSE(r0, &(0x7f0000000240), 0x1012)

12:11:20 executing program 2:
creat(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00'})
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
dup(0xffffffffffffffff)
prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/253)
clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x5, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000101, &(0x7f0000000000)=@framed={{}, [@generic]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)

12:11:20 executing program 3:
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  504.223210] input: syz1 as /devices/virtual/input/input16
[  504.237365] input: syz1 as /devices/virtual/input/input17
[  504.295119] input: syz1 as /devices/virtual/input/input18
12:11:20 executing program 2:
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x44)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x20008088)
write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
sendfile(r1, r2, 0x0, 0x7fffffff)

12:11:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)

12:11:20 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)

12:11:20 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00')
flistxattr(r0, 0x0, 0x4d)

12:11:20 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

[  504.604941] input: syz1 as /devices/virtual/input/input20
12:11:20 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)

[  504.705788] input: syz1 as /devices/virtual/input/input21
12:11:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=""/131, 0x83})
writev(r0, &(0x7f00000001c0), 0x214)

[  504.918066] input: syz1 as /devices/virtual/input/input22
12:11:21 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:11:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0)

12:11:21 executing program 0:
syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088644500001c000000570000907804000000000000000000000000089078"], 0x0)

[  505.022646] input: syz1 as /devices/virtual/input/input23
12:11:21 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000580)=0xfffffffffffffffe, 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000400)="0a5c1f023c126285719070")
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001580), &(0x7f00000015c0)=0x4)

12:11:21 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:11:21 executing program 0:
r0 = socket(0x1e, 0x805, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000}, 0x159)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x94)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

[  505.269291] input: syz1 as /devices/virtual/input/input24
12:11:21 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[  505.354726] input: syz1 as /devices/virtual/input/input25
12:11:21 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
tkill(r0, 0x1000000000016)

12:11:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = dup2(r0, r0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0)

[  505.542761] input: syz1 as /devices/virtual/input/input26
12:11:21 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

[  505.665736] input: syz1 as /devices/virtual/input/input27
[  505.760789] input: syz1 as /devices/virtual/input/input28
12:11:21 executing program 0:
r0 = socket(0x1e, 0x805, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000}, 0x159)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x94)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

12:11:21 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\x00\xb5\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb5\xb7\r\x88\x88\xc2u\x8f\xaf3\x1c\xe3\x9cZ\x00\x00\x00\x00\x00\x00')
flistxattr(r0, 0x0, 0x0)

12:11:22 executing program 4:
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:11:22 executing program 5:

12:11:22 executing program 2:

12:11:22 executing program 3:

12:11:22 executing program 0:

12:11:22 executing program 2:

12:11:22 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:11:22 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
tkill(r0, 0x1000000000016)

12:11:22 executing program 5:
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r0, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0)
pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806)
getpeername$netlink(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x20020102000007)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000)

12:11:22 executing program 0:

12:11:22 executing program 2:

12:11:22 executing program 3:

12:11:22 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:11:22 executing program 0:

12:11:22 executing program 2:

12:11:23 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
tkill(r0, 0x1000000000016)

12:11:23 executing program 3:

12:11:23 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, 0x0, 0x0, 0x0)

12:11:23 executing program 0:

12:11:23 executing program 2:

12:11:23 executing program 5:

12:11:23 executing program 3:

12:11:23 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, 0x0, 0x0, 0x0)

12:11:23 executing program 0:

12:11:23 executing program 2:

12:11:23 executing program 2:

12:11:23 executing program 3:

12:11:23 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:23 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, 0x0, 0x0, 0x0)

12:11:23 executing program 0:

12:11:23 executing program 5:

12:11:24 executing program 3:

12:11:24 executing program 2:

12:11:24 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, 0x0)

12:11:24 executing program 5:

12:11:24 executing program 0:

12:11:24 executing program 3:

12:11:24 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:24 executing program 2:

12:11:24 executing program 5:

12:11:24 executing program 0:

12:11:24 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, 0x0)

12:11:24 executing program 3:

12:11:24 executing program 2:

12:11:24 executing program 5:

12:11:24 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, 0x0)

12:11:24 executing program 0:

12:11:24 executing program 3:

12:11:24 executing program 2:

12:11:24 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:25 executing program 5:

12:11:25 executing program 3:

12:11:25 executing program 2:

12:11:25 executing program 0:

12:11:25 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {0x0}], 0x2, 0x0)

12:11:25 executing program 5:

12:11:25 executing program 3:

12:11:25 executing program 2:

12:11:25 executing program 0:

12:11:25 executing program 5:

12:11:25 executing program 3:

12:11:28 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:28 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {0x0}], 0x2, 0x0)

12:11:28 executing program 2:

12:11:28 executing program 0:

12:11:28 executing program 3:

12:11:28 executing program 5:

12:11:28 executing program 5:

12:11:28 executing program 0:

12:11:28 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/17, 0x11}, {0x0}], 0x2, 0x0)

12:11:28 executing program 2:

12:11:28 executing program 3:

12:11:28 executing program 0:

12:11:31 executing program 2:

12:11:31 executing program 5:

12:11:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x0)

12:11:31 executing program 3:

12:11:31 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:31 executing program 0:

12:11:31 executing program 2:

12:11:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)

12:11:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x0)

12:11:31 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x20000000084)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @dev}, 0x18, {0x2, 0x0, @remote}, 'ip_vti0\x00'})

12:11:31 executing program 5:
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b]}, 0xd}, 0x80, 0x0}, 0x0)

12:11:31 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f00000000c0), 0x8)
close(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")

12:11:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x0)

12:11:31 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000001f000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="512688968416b16715f27c3486dd", 0x0, 0x10000}, 0x28)

12:11:31 executing program 3:
r0 = socket$inet(0x2, 0x2000000000005, 0x0)
sendto$inet(r0, &(0x7f0000000080)="8a", 0x1, 0x80, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x7, @random="47b0f4fcacd6"}, 0x0, {0x2, 0x4e22, @broadcast}, 'bpq0\x00'})

12:11:31 executing program 0:
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc03, 0x0, 0xd]}, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")
write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="337cb9924c4e0a1971d796390e31f1159f87815354e4cc9b006c4527cf038d13dd542a71f8a628caa600618eef1ef4dd7dd0906789acef487a098d07c2ccd5a864475aa5d6869cb02dd8c04752df748f51d1e327e0ea996f709b47ba723d32d9fa579da52e0df7f043134829a72c1da1b470be2dcc1fe7b4c812"], 0x7a)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800402}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x400, 0x70bd29, 0x2, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x4bc, 0x0, 0x400, 0xffff}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
close(r1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x800000100000001, 0x4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)

12:11:34 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:34 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:11:34 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000009340)=""/153, 0x34000}], 0x1}}], 0x1, 0x0, 0x0)

12:11:34 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x425, 0x9b3, 0x20, 0xe53}, 0x8)
close(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")

12:11:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x50, r1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x800000000000000}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x50}}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000006c0)=""/81, &(0x7f0000000140)=0x51)

12:11:34 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r0, 0x65, 0x2, 0x0, 0x3b2)

12:11:34 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:11:34 executing program 2:
r0 = socket$inet(0x2, 0x2000000000005, 0x0)
sendto$inet(r0, &(0x7f0000000080)="8a", 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x7, @random="47b0f4fcacd6"}, 0x0, {0x2, 0x4e22, @broadcast}, 'bpq0\x00'})

12:11:34 executing program 0:

12:11:34 executing program 2:

12:11:34 executing program 5:

12:11:34 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:11:37 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:37 executing program 0:

12:11:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000640)="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", 0x9c1}], 0x1, 0x0)

12:11:37 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68)
close(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")

12:11:37 executing program 5:

12:11:37 executing program 3:

12:11:37 executing program 5:

12:11:37 executing program 0:

12:11:37 executing program 4:

12:11:37 executing program 3:

12:11:37 executing program 0:

12:11:37 executing program 5:

12:11:40 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:40 executing program 4:

12:11:40 executing program 3:

12:11:40 executing program 0:

12:11:40 executing program 5:

12:11:40 executing program 2:

12:11:40 executing program 4:

12:11:40 executing program 0:

12:11:40 executing program 5:

12:11:40 executing program 2:

12:11:40 executing program 3:

12:11:40 executing program 4:

12:11:43 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x1000000000016)

12:11:43 executing program 0:

12:11:43 executing program 5:

12:11:43 executing program 4:

12:11:43 executing program 2:

12:11:43 executing program 3:

12:11:43 executing program 3:

12:11:43 executing program 0:

12:11:43 executing program 2:

12:11:43 executing program 4:

12:11:43 executing program 5:

12:11:44 executing program 0:

12:11:44 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x1000000000016)

12:11:44 executing program 3:

12:11:44 executing program 4:

12:11:44 executing program 2:

12:11:44 executing program 5:

12:11:44 executing program 0:

12:11:44 executing program 3:

12:11:44 executing program 4:

12:11:44 executing program 2:

12:11:44 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x1000000000016)

12:11:44 executing program 0:

12:11:44 executing program 5:

12:11:44 executing program 3:

12:11:44 executing program 2:

12:11:44 executing program 4:

12:11:44 executing program 5:

12:11:44 executing program 0:

12:11:44 executing program 5:

12:11:44 executing program 3:

12:11:44 executing program 2:

12:11:44 executing program 4:

12:11:45 executing program 5:

12:11:45 executing program 1:
clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:45 executing program 4:

12:11:45 executing program 3:

12:11:45 executing program 0:

12:11:45 executing program 2:

12:11:45 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00')
lseek(r0, 0x0, 0x2)

12:11:45 executing program 3:

12:11:45 executing program 4:

12:11:45 executing program 2:

12:11:45 executing program 0:

12:11:45 executing program 1:
clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:45 executing program 3:

12:11:45 executing program 4:
r0 = socket(0x10, 0x802, 0x0)
sendto(r0, &(0x7f0000000100)="120000001a00e5ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

12:11:45 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x24)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xaa})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)

12:11:45 executing program 5:
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040))
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ptrace(0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ptrace$getregset(0x4204, 0x0, 0x0, 0x0)
write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
setgid(0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x4)
close(r3)

12:11:46 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000))

12:11:46 executing program 1:
clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:46 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)='I', 0x1, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r1)

[  530.033420] ptrace attach of "/root/syz-executor2"[20093] was attempted by "/root/syz-executor2"[20095]
12:11:46 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1]}, 0x18)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

12:11:46 executing program 2:
r0 = socket$inet6(0xa, 0x2000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)

12:11:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst]}, 0x0, 0x3, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)

12:11:46 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)

12:11:46 executing program 0:
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x19)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x0, 0x62})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

12:11:46 executing program 4:
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x19)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x30da, 0x62})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

12:11:46 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:46 executing program 0:
wait4(0x0, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)

12:11:46 executing program 4:
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000400)=ANY=[]})
r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x2, 0x28021)
write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e)

12:11:46 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0)
close(r0)

[  530.417080] ptrace attach of "/root/syz-executor0"[20125] was attempted by "/root/syz-executor0"[20126]
12:11:46 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)

12:11:46 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:46 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r0, &(0x7f0000000000)='_', 0x1, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0)

12:11:46 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080), 0x4)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

12:11:46 executing program 2:
setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x3)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300))
r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0xc000000000, 0x40001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000a40)=@req={0x7ff, 0x20, 0x6, 0x8000}, 0x10)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x400, 0x0)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000400))
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000380)=0x5)
clone(0x6103001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x29, 0x1, 0x7f, 0x0, "0000e1d1ea0000000000000000afa68a69da0000000000000000000800"})
ioctl$EVIOCGSW(r1, 0x8040451b, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
write$FUSE_LSEEK(r3, &(0x7f0000000440)={0x18, 0x0, 0x6, {0x401}}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000780)=0x9, 0x4)
mmap(&(0x7f0000320000/0x3000)=nil, 0x3000, 0x0, 0x8031, r0, 0x3)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000700)={'filter\x00'}, &(0x7f0000000580)=0x78)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000180), 0x4)
accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f00000004c0)=0x1c)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000003c0)={0x3, 0x1a, 0x5, 0x26, "90e8085aabf958b8b2dfcd43fd39b1c8606d47e4e51c4c11b0088dbcaacbdee8"})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
r5 = dup2(r0, r0)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0xfffffebd)

12:11:47 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x5, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e6000000000000000000000700"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)

12:11:47 executing program 0:
syz_genetlink_get_family_id$ipvs(0x0)
clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x5, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000001500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)

12:11:47 executing program 4:
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000400)=ANY=[]})
r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x2, 0x28021)
write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e)

12:11:47 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:47 executing program 0:
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="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"]})
r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x2, 0x28021)
write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e)

12:11:47 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000001500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)

12:11:47 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="9800000000000000000000000000000000000000f5432a009500003b00000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)

12:11:47 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000))

12:11:47 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0xc}, 0x80, 0x0}, 0x20004040)

12:11:48 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x10000000004, 0x4, 0x4}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), 0x0}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
socketpair(0x10, 0x6, 0x0, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='user@\x00')
close(0xffffffffffffffff)

12:11:48 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x0, 0x800}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000200)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)='0\x00')
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

12:11:48 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0x12)

12:11:48 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001940)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="39000000140081ae00002c000500018701546f4ceb6aa2d68f3f7898a621abca1b37a2b25d4e7d06a6580e883795c0c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001840)={&(0x7f00000001c0)=@can, 0x80, 0x0}, 0x0)

12:11:48 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0xc}, 0x80, 0x0}, 0x20004040)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000180)={'ip6gretap0\x00', @random="01003a1e2410"})

12:11:48 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:48 executing program 4:
socket$kcm(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x80002, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='%d')
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x1800000000000006, 0xe, 0x0, &(0x7f0000000000)="b90703e69ebf08bb64879e100800", 0x0, 0x69}, 0x28)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000004c0))
socket$kcm(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), 0x0}, 0x20)

12:11:48 executing program 0:
r0 = socket$kcm(0x2, 0x2000000000005, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$sock_attach_bpf(r0, 0x84, 0x8, 0x0, 0x8)

12:11:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x8000000000003, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="fa0c000016008152915a655267d7d137ab2ff96e27bf28b285fe3903a44a6017edcaa3a2b4dade3baee72569b51366463fedf5e787c05b0cb5927a3a7edfb4d078e9ae1504d489e058be9fafaa633705b6d4bf6a01f2cd9ebf19724a1b0b9760612582bccd3983ce4474844c065e914dab8bbd52a45f431678bfe28633bf7c8dc83df809238ed87f1e393883ef750ce79c6f84e5e5de176e2f26024e4e3a3d8fbdaf3254022f265d8ccc5fd7205d9d9c2c407ec58162523082d81a39c43f782332ba8e82b4107a049cb82bba8b5edd80473844291437b8d22edca68047582e6be601e9df5e60a32c7cd202c5a30b8b606e43362739551cbb013b65e238f41cc00d7900140cf06b7bc9030f2563bcf9d4f4b7f48c79ec1a323d06276a0a3f8846b7c62b66f9709cabcaad234c53f3bc9b11165a6321f1db1057f076cfaebf8fbfa033fdc1dc2c3e314b36b3b3dd50425447da8bc5938ff7a17361100ab0b1ffeab7ac487411824224781eb9cdd4edef57ae91cd61f56a56c0599cfc3a491447207610f242da6cd6b030ae5f35e3181c44ae68665a023759b9ef4358db46107edc49194aed72b62600ec0ae4fc9065be059fc010cd6e6c9ea77c666b5e25693fbcf595e3e57113ff3a0e0c63d0604a16ea5adb8b7b54d47d4d8804612fde571863064528a49bf684d8a880a11afd819f186c177c49cac3ba1e9d1aa7ad0ff36b9e36d73c05b8abcaf96df0bacd2c9653f30ec29e1284af8749a9b2803c2727e992a6e65df192e1875c3e6d3553ffb7cb34ffee8f8ac0123c390454b42a0316952cbc9949376d9320ec207f77c2d5eb9e86d720cf8e9008a9a51932b45cd4cab21414c92d1c20f9e15e3fc16c7ce181e9ab19b01b70343934c823b1215e173405dd225233823cd4a604a77f06b14eb05b860e6cf8790335788c43abe9de1598e9952e5c7e6b2f8b17b1008ff3033e7d1635b008834bdf4054e6195e55000827c6202b227dde06f23ae21c00b371bdb6b7ea47b2e78844b52a77f9f0929790dcd7df2752e4af092d539c87c18751a5eb3eb4d38a2a0e070064b4ffaacff0543b115cc89f6c7e78f12147ebfcf1c80bac8f98deb59cbe670adb4cd1882a7e0ca4ba85ae9d445223ffb32301d46c0c9b05a830cbea0f72294ab3b539e4ed7cac2e22b235e8ceedeb643fb90b061a58368e76036ff3c1828d8a4e21288662afb6f2acab00d734db7ffc8373a928571819ce9ea6cb0956a6093b2b1f65662b76bc6ac8a171451714e1d0e4ff76470c7651d3cf16f37cb5547317e4fef51e4fb471de6ffbb90c2dd4a64266c4c2f75fc62e58ec306fb92212fb262d8b138899a3b53e67cde2f97d94cd2265cc04d32b29edf77e75b1f88372495cb2937f183bfc8604d72efb3af5c1f41b665b25592676b0ad2185478eade7e663e743e0e09cce6224c787ce1d789dc4a9b350bfe3a75f551341b11dd96cdaea17989dad565b16324a69842dc29a0ed16744ea5935598ac8238e146139189927a14d3b2863044b63b468ae75f48fab68ad235c36daffebfe4b468fc9b13198b1a683dcd3b3b4294ba22caddbacf8792d5783bc12e2538e4609e6bb6e9eeab98a06452c252a657f400260458c29fae8879097698c9aba2b2d889fc78f00d0d8271e09e8542b71018be6ff8cb03cb423e79303047d6ce124a00f64461b899bbddc4fe87ff677533391e16c01fa9cd6420bdc856c4c7f057b249ee9817efd6ab2cd02eb887d2631435ef2d5a1c7e57ac046ef615a1285ca89ade18ae69af3b3f8f76ca8aa060e373c0f99424fe1c5fadc72fe145fd2d4e4da4b78597890516857de188fcdaf15e3b0871b346cd39ab772cc25fab49e60c818cde934b137144adfc4fbde3ddbeccce9679f02b66746e822c67b3ed5fdafb4a936a2683b39a002115ecd62220605ca542610a80f2e3530aa89d3ed6ed9c57bbfd5db3a0b62786a608309a355443c616032008f9458b2f10db93e29470192370084e9322c309c9b23333b46d04e79176659503ad4b05deebb3c67d715ee6e84a89002ea6f7f71bf41ad36b42c8ae01c97174dbb641e50641aba60c291a84e906c013087370a5043e07d36fcead378f6c1e6ed3f5ac695124b82b20261cf7c9b82172e09c81d7d39eed72aee5678613a3c671ddd44f2c7c75a3b5d316aa165d56594fccab20903d7f503a08928e76c779918b2463b720ee6367a43e494a1db3ed1a80690e665570c01ce7eb979cdd95d4e1ca51730eb2cd63ffb2a56049601627c9788254945142dce85adbe1eb5997d16cdfe2a3758b13dc6bb121e2206ae64206868c1c5e89a101bc121719ac435dcad093f5f67cefd863cc7c8f3fc8a9dc62a83c115f1ce714b18af067951aa06dd9bb4ed98a820bf4704d156977caa4e6415b2a0df0386e2f6a061bf44abc8a397cf4abdafc51b78ebec9831f3c60fde6e62a1fd082903080aef20ff8de8bc0dced06f627514600539ca7114a088848da4244a85b4cf5b976d3a698c9a568d417e276917baba05d1a02181db2e6cc35986da4ccc63f8cd8e85a4a923dd27e2f499664601fdc44fdf46e2d2880cd5a7ece89c370234c438dcc0b43865cc62bad21e9dc37da758cbe01752f02fd9cbfe98630a30a78bb1239e25cdaba3d45d13cd3e7216d9d8070f3ff1a0cd9a0c91f29974c98f2677ba88c1091bde4be0cd37ea5eeb3b9cd59560a00ddd40bbd60ffb8d4daa973ef0977c18dd4b38a605cee957872dca85787c37b6931293eddb77015faf143d1d28d24822d1a5d134799e8175a38b255aaf0e39b68c7f734e2e1e7044626daa84c9113e86d86ef63c86010000000000000061dcf516c32d49478f7af30d52baa18ea6b0fc286c06b7e4ee019bf3fe74845a652d4a52aaa241a189c411e90e2953863a2bc4124e573607b94cdff19e280731824931a83f056cb5857672619b97ce38081592c0c319ce72e04e9eadce89775cfb5a4b2842663bc79bde565435cbcd46c4d505ceef7dde86512d39d4cb270deb7e79ebf8602bdc0d76c3e833d36ee08be10be634f44056c2f3fd6a328c7cd562e9c96ff7845fc3df81a876bb07f1cc833bed6ca1dc5cf935a4e959db6a4fae6edbc45357d8758faa9cd04cd41eb6efcfbd91658519bf520b90107f767d126854818485e98cb7ef56804de6950bf4e72098a949d14ea0e4e9f2534cf16cac0aeb970fc5c39f37e93910d5c99ac163792260d2280ec5c9a79bf295588ec23f524aae65f800f9c39e338f3d66b1a69e5488e04823eab36ae6ec6a2c5ce133ccd819a2b217b1ab7f4afd1697bb42929b3131358b5421c83f925571934442d0fd0ce3990d4e5d31d8b956f76df3c2f8533e46b892c88692ce009155dd5c7dbe4c86874b95762650f63e4b4aabb41320978b05b80cfe8fa2830904ef6b5c4f7ad46ca5dac151c9077c4d2c6adfe5066a8eb09a9bc6892330ea2b259a53c7137f8498254e1b04bf920c35c5333c4d640b11da60917ae921037b4aedbd6a0fbeeaf88ef6defc830552b4cbe3fe2a844806a48923dd428ea1c8d797bd8e6aabd1d1a8c97c8038b627120a77f4e47fa1f788aa9da268b0ec10fc453cb722685df76547dbf55a16663aa2b2a51e9c52456cccdf682592d1369dd12e3d3cb504e0f2d7004e62c297d5a25d0298045dae8fca8cb795ea57288b85a7e705820087d55ca6c42e920e2aa1174e128622cf64a197fd728cb2949536ba63e8bda8589261f1377caea37302e47228d3708a5666c66ba711d3c0b310a8c47e86d26597299d523c28c90e4feab43e950f398f7b61ccf7e6490d75ba6d8214e2d5ef2d7a088db490e1ebacf4e6eecc896cb1c704f0a8fcdf4ccb5dfa53eaf43d709287f36c10188c19fd59da7d73494de089c1b0a69ee22dcb847001c5317846a876bee1685d11c4db0673ec4c3a12008bb719650525b3c39e2b0469edda93830b3f1bde3e5b0b4637197866bb08c5858cf0d9876e3c7cad54169887bf9c80f9f4be362e1bc8c27f3434e9a918bac355c184bd899b9aebe6be20e70c0c69234342eb8b57aa9ffb7797a32df91cec2bbc90201658ca2297bf1fe68e65363867e1f6ad79b827f363d64fbd3b188d95307d011c4ce5bf4407908c058eeb97ec98dd0ebfdab6b348fa387f2a7573cac25344c983e8fd526c30ee6d59fe99a30c7d7e2864aa22bfa49df5f32da68309cab3ed9c2ce69b6ecb8508ce28a43ebd6c809b8afd07a4606e664965d316f3707a3abee9bcdc32a78031b0171fb565d90c16cd56e5792c0cf618b799715f32538e38f493d4e19ec76fc8a07576a13975706bfc2bb1516c2d18a4385cc37a206eac6c9fb8d073576a1f56d529e407154fdd0c40d079ae44962c26743b4bf5950ac5ee34c5d7bd60b364ce670958112c37b9829bed7e1327356d6b94af3ba020c2337b2dba37d00af8a128a614390cdde62ce871f948427fb5c187df9a1540a5cc71da1a86144acbfd94bf433f744f0c4f2a675eba3ed251c5b11b08dfefc726c0394a9b75121d88467ed4b2cd69819dfe50693a4a4c8370d3af12f41c0067283bbb5a90044a340fc357a11081a6c13bb9c32d9caa448479fd5f0302b6729ca7233094540b14546d6bcc15771c2686279b34f9c0914f5306d0fabd5979266ea01a17a22507e560dbf904dd62c40e2bccb468710ee4c1caf4e786", 0xcfa}], 0x1}, 0x0)

12:11:48 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0xc}, 0x80, 0x0}, 0x20004040)
close(r0)

12:11:48 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8912, &(0x7f0000000180)={'ip6gretap0\x00', @random="01003a1e2410"})

12:11:48 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:48 executing program 0:
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0)
socketpair(0x0, 0x80002, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x1800000000000006, 0xe, 0x0, &(0x7f0000000000)="b90703e69ebf08bb64879e100800", 0x0, 0x69}, 0x28)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0)

12:11:48 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x180000000000000a, 0x15, 0x0, &(0x7f0000000b00)="b99cc5d710d86cd86c075d649eddffffffffffffff", 0x0, 0x69}, 0x28)

12:11:48 executing program 3:
recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001000)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a00)=""/164, 0xa4}, {&(0x7f0000000cc0)=""/177, 0xb1}, {&(0x7f0000000d80)=""/180, 0xb4}, {&(0x7f0000000e40)=""/140, 0x8c}], 0x4, &(0x7f0000000f80)=""/124, 0x7c}, 0x10000)
sendmsg$kcm(r0, &(0x7f00000012c0)={&(0x7f0000001040)=@rc={0x1f, {0x9, 0x2, 0x4, 0x0, 0x3, 0x6}, 0x6}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001a40)="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", 0xfff}], 0x1}, 0x44001)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r2 = gettid()
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0)='syzkaller\x00', 0xfff, 0xff, &(0x7f0000000480)=""/255, 0x0, 0x0, [], 0x0, 0x3}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801})
openat$cgroup(r5, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x100})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x7}, 0x20)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1)
write$cgroup_int(r5, &(0x7f0000000000)=0x9295, 0x12)
socket$kcm(0x29, 0x7, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x6609, 0x7fffff)
perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x9, 0x7fffffff, 0xb96, 0x3ff, 0x0, 0x3, 0xa200, 0xffffffffffffffff, 0x101, 0x46, 0x4, 0x0, 0x3cc, 0xf1, 0x1000, 0x69a3f259, 0x200, 0xffffffff, 0x6, 0x55, 0x100, 0x0, 0x7, 0x0, 0x0, 0x42, 0x0, 0x442e5e6c, 0x80, 0x9, 0x7, 0xf1, 0x7, 0x4, 0x0, 0x0, 0x0, 0x4d0c, 0x4, @perf_bp={0x0, 0x8}, 0x1080, 0x1, 0x0, 0x2, 0x7ff, 0x0, 0x1}, r2, 0xc, 0xffffffffffffff9c, 0x0)

12:11:48 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf1000b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0)

12:11:48 executing program 0:
r0 = socket$kcm(0x2, 0x2000000000005, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$sock_attach_bpf(r0, 0x84, 0x21, 0x0, 0x8)

12:11:48 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:49 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000180)={'ip6gretap0\x00', @random="01003a1e2410"})

12:11:49 executing program 5:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4000000004, 0x6, 0x0, r1, 0x0, [0x305f, 0xa]}, 0x2c)

12:11:49 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="01003a1e2410"})

12:11:49 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7}, 0x2c)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x9, 0x4)

12:11:49 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:49 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

12:11:49 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x3001})
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
write$cgroup_subtree(r2, 0x0, 0x0)

12:11:49 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0x7}, 0x40000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000a00))
close(r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

12:11:49 executing program 0:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0xa, 0x4000000000080002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8941, &(0x7f0000000240)=0x1)

12:11:49 executing program 4:
request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f00000001c0)='syz', 0x0)

12:11:49 executing program 5:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x2)

12:11:49 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$FUSE_ENTRY(r1, &(0x7f00000003c0)={0x90}, 0x90)
read(r0, &(0x7f0000000240)=""/98, 0xfffffffffffffd99)
sendto$inet(r0, &(0x7f0000d7cfcb), 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x10)

12:11:49 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=<r1=>0x0)
ptrace$setsig(0x4203, r1, 0x40, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000802, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000140)=0x4, 0x4)
r2 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
write$FUSE_ENTRY(r2, &(0x7f00000003c0)={0x90, 0x0, 0x2, {0x4, 0x3, 0x9, 0x9, 0x1000, 0x4, {0x2, 0x8, 0xed, 0xd61, 0x401, 0x8, 0x7, 0xf788, 0x6, 0x8, 0xd72, r3, 0x0, 0x0, 0xfffffffffffffffd}}}, 0x90)
read(r0, &(0x7f0000000240)=""/98, 0xfffffffffffffd99)
sendto$inet(r0, &(0x7f0000d7cfcb), 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x10)

12:11:49 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x60)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffff})

12:11:49 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0x7}, 0x40000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000a00))
close(r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

12:11:49 executing program 0:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x2)

12:11:52 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:52 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
sendto$inet(r0, &(0x7f0000000740)="d56a20ffc850e8d7c1adae1b9b7ce4928a4fe9ee06313e2d0de4bf5f5b8c2ef4aa9c6c4f0cc16b64c555b2238f1c8b0dee0f4e529de480cc68983e0661ecabc37a79b6aa6836adb377be24ca34b9ea8953237574573130f8a218219f794d80e24226bf601fd6fc7afd934979ffc47f2146f3b212bc052579d49dcb1c65daf1e0f0c3cd7e72bf0df3a9685988c792ced0735ae1dde356092b82860cbf66a531f91e61bf23d525e3a3f9baafcc9cd38725a5a3cae820fbc87398243169d0968e25d734e1f12ad794a1e636157335dad722dd", 0xd1, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
ftruncate(0xffffffffffffffff, 0x208200)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2)

12:11:52 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x200000088)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10)
r1 = dup2(r0, r0)
sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
r2 = dup2(r0, r0)
setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000040), 0x5d0)
write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x0)

12:11:52 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0xfffffc9a)

12:11:52 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0x7}, 0x40000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000a00))
close(r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

12:11:52 executing program 3:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
truncate(0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0)
open(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

12:11:52 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x0, 0x0})

12:11:52 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$FUSE_ENTRY(r1, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, {0x2, 0x0, 0xed, 0xd61, 0x401, 0x8, 0x7, 0xf788, 0x6, 0x8, 0xd72, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}}, 0x90)
read(r0, &(0x7f0000000240)=""/98, 0xfffffffffffffd99)
sendto$inet(r0, &(0x7f0000d7cfcb), 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x10)

12:11:52 executing program 3:

12:11:52 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0x7}, 0x40000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000a00))
close(r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

12:11:52 executing program 3:

12:11:53 executing program 3:

12:11:55 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:55 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0x7}, 0x40000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000a00))
close(r5)

12:11:55 executing program 3:

12:11:55 executing program 5:

12:11:55 executing program 4:

12:11:55 executing program 0:

12:11:55 executing program 0:

12:11:55 executing program 4:

12:11:55 executing program 3:

12:11:55 executing program 5:

12:11:55 executing program 0:

12:11:56 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0x7}, 0x40000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000a00))

12:11:58 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:11:58 executing program 4:

12:11:58 executing program 3:

12:11:58 executing program 5:

12:11:58 executing program 0:

12:11:58 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0x7}, 0x40000040)
socket$kcm(0x29, 0x2, 0x0)

12:11:58 executing program 0:

12:11:58 executing program 3:

12:11:58 executing program 5:

12:11:58 executing program 4:

12:11:58 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0x7}, 0x40000040)

12:11:58 executing program 5:

12:12:01 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:01 executing program 3:

12:12:01 executing program 0:

12:12:01 executing program 4:

12:12:01 executing program 5:

12:12:01 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)

12:12:01 executing program 5:

12:12:01 executing program 3:

12:12:01 executing program 0:

12:12:01 executing program 4:

12:12:01 executing program 5:

12:12:01 executing program 4:
r0 = socket(0x2, 0x8001, 0x0)
shutdown(r0, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10)
shutdown(r0, 0x1)

12:12:04 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:04 executing program 0:

12:12:04 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000c40)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05')
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d)

12:12:04 executing program 4:

12:12:04 executing program 5:

12:12:04 executing program 3:

12:12:04 executing program 5:

12:12:04 executing program 0:

12:12:04 executing program 4:

12:12:04 executing program 3:

12:12:05 executing program 5:

12:12:05 executing program 0:

12:12:07 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:07 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)

12:12:07 executing program 4:

12:12:07 executing program 3:

12:12:07 executing program 0:

12:12:07 executing program 5:

12:12:07 executing program 3:

12:12:08 executing program 4:

12:12:08 executing program 5:

12:12:08 executing program 0:

12:12:08 executing program 4:

12:12:08 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x4, 0x3ff, 0x2, 0x1, 0x19, r4}, 0x2c)
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000040)=r5, 0x52d)

12:12:10 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:10 executing program 3:

12:12:10 executing program 5:

12:12:10 executing program 0:

12:12:10 executing program 4:

12:12:10 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000b00)='cpu.stat\x00', 0x0, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000040)=r4, 0x52d)

12:12:11 executing program 4:

12:12:11 executing program 0:

12:12:11 executing program 3:

12:12:11 executing program 5:

12:12:11 executing program 5:

12:12:11 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)

12:12:14 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)

12:12:14 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)

12:12:14 executing program 0:

12:12:14 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:14 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)

12:12:14 executing program 5:
request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0)

12:12:14 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x28, 0x2, 0x0, &(0x7f0000000000))

12:12:14 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001540)="2e000000110081aee405d10200000e00fa076b000a00000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0)

12:12:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0x17b)
close(0xffffffffffffffff)

12:12:14 executing program 4:

12:12:14 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/net/tun\x00', 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000040)=r2, 0x52d)

[  558.280932] netlink: 14 bytes leftover after parsing attributes in process `syz-executor0'.
12:12:14 executing program 5:
request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0)

12:12:14 executing program 4:
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
socketpair(0x28, 0x2, 0x0, &(0x7f0000000000))

12:12:17 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:17 executing program 0:
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], 0x1)
write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6)
socket$kcm(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

12:12:17 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0x0)

12:12:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='\'keyring\\vmnet0\x00')
r2 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000040)=r2, 0x52d)

12:12:17 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

12:12:17 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]})
readlink(0x0, 0x0, 0x0)

[  561.217933] kauditd_printk_skb: 7 callbacks suppressed
[  561.217962] audit: type=1326 audit(1546085537.273:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20607 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:12:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r1 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d)

12:12:17 executing program 0:

[  561.294316] audit: type=1326 audit(1546085537.313:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20601 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
12:12:17 executing program 3:
socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x29, 0x2, 0x0)
recvmsg(r1, &(0x7f00000024c0)={&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002000)=""/171, 0xab}, {&(0x7f00000020c0)=""/16, 0x10}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002140)=""/168, 0xa8}, {&(0x7f0000002200)=""/133, 0x85}, {&(0x7f00000022c0)=""/235, 0xeb}], 0x6, &(0x7f0000002440)=""/73, 0x49, 0x6}, 0x40002000)
recvmsg(r1, &(0x7f0000001e40)={&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001680)=""/234, 0xea}, {&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001880)=""/154, 0x9a}, {&(0x7f0000001940)=""/154, 0x9a}, {&(0x7f0000001a00)=""/248, 0xf8}, {&(0x7f0000001b00)=""/221, 0xdd}, {&(0x7f0000000580)}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/110, 0x6e}], 0x9, &(0x7f0000001d80)=""/191, 0xbf, 0x10001}, 0x2022)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002540), 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f00)={r3, r3, 0x3}, 0x10)
recvmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/246, 0xf6}], 0x4, &(0x7f00000004c0)=""/83, 0x53, 0x3da}, 0x40000041)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xaf, 0x0, &(0x7f0000000280)=""/175}, 0x28)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)={&(0x7f0000002580)='./file0\x00', r3}, 0x10)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'bridge_slave_0\x00'})
r5 = socket$kcm(0x2, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2)
sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
close(r2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x890b, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x50, &(0x7f0000001e80)={0x0, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c00)=r6, 0x4)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000002500))
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001f40)={r2, r7})
recvmsg(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002600)=""/203, 0xcb}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x1}, 0x142)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r8, &(0x7f0000847f95), 0x0}, 0x18)

12:12:17 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:17 executing program 0:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c'], 0x2)
write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6)
socket$kcm(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)

12:12:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d)

12:12:17 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffff0a, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
read(r0, &(0x7f0000000380)=""/98, 0xfffffffffffffd5e)
r1 = dup2(r0, r0)
write$apparmor_exec(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5)
sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYPTR], 0x1}}, 0x0)
shutdown(r0, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)

12:12:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}, 0x2c)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d)

12:12:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d)

12:12:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

[  562.012634] audit: type=1326 audit(1546085538.063:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20601 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  562.074511] audit: type=1326 audit(1546085538.133:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20607 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0xffff0000
[  562.123876] binder: 20652 RLIMIT_NICE not set
[  562.135973] binder: 20651:20652 tried to acquire reference to desc 0, got 1 instead
[  562.152969] binder: 20651:20653 unknown command 0
[  562.158010] binder: 20651:20653 ioctl c0306201 20008fd0 returned -22
12:12:18 executing program 4:

12:12:18 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d)

12:12:18 executing program 5:

12:12:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:18 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:18 executing program 3:
socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x29, 0x2, 0x0)
recvmsg(r1, &(0x7f00000024c0)={&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002000)=""/171, 0xab}, {&(0x7f00000020c0)=""/16, 0x10}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002140)=""/168, 0xa8}, {&(0x7f0000002200)=""/133, 0x85}, {&(0x7f00000022c0)=""/235, 0xeb}], 0x6, &(0x7f0000002440)=""/73, 0x49, 0x6}, 0x40002000)
recvmsg(r1, &(0x7f0000001e40)={&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001680)=""/234, 0xea}, {&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001880)=""/154, 0x9a}, {&(0x7f0000001940)=""/154, 0x9a}, {&(0x7f0000001a00)=""/248, 0xf8}, {&(0x7f0000001b00)=""/221, 0xdd}, {&(0x7f0000000580)}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/110, 0x6e}], 0x9, &(0x7f0000001d80)=""/191, 0xbf, 0x10001}, 0x2022)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002540), 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f00)={r3, r3, 0x3}, 0x10)
recvmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/246, 0xf6}], 0x4, &(0x7f00000004c0)=""/83, 0x53, 0x3da}, 0x40000041)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xaf, 0x0, &(0x7f0000000280)=""/175}, 0x28)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)={&(0x7f0000002580)='./file0\x00', r3}, 0x10)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'bridge_slave_0\x00'})
r5 = socket$kcm(0x2, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2)
sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
close(r2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x890b, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x50, &(0x7f0000001e80)={0x0, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c00)=r6, 0x4)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000002500))
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001f40)={r2, r7})
recvmsg(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002600)=""/203, 0xcb}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x1}, 0x142)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r8, &(0x7f0000847f95), 0x0}, 0x18)

[  562.539799] binder: 20665 RLIMIT_NICE not set
12:12:18 executing program 2:
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d)

12:12:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:18 executing program 5:

12:12:18 executing program 4:

[  562.815661] binder: 20684 RLIMIT_NICE not set
12:12:18 executing program 2:
r0 = socket$kcm(0xa, 0x0, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d)

12:12:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:19 executing program 4:

12:12:19 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

12:12:19 executing program 5:

[  563.059381] binder: 20692 RLIMIT_NICE not set
12:12:19 executing program 4:

12:12:19 executing program 5:

12:12:19 executing program 3:
socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x29, 0x2, 0x0)
recvmsg(r1, &(0x7f00000024c0)={&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002000)=""/171, 0xab}, {&(0x7f00000020c0)=""/16, 0x10}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002140)=""/168, 0xa8}, {&(0x7f0000002200)=""/133, 0x85}, {&(0x7f00000022c0)=""/235, 0xeb}], 0x6, &(0x7f0000002440)=""/73, 0x49, 0x6}, 0x40002000)
recvmsg(r1, &(0x7f0000001e40)={&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001680)=""/234, 0xea}, {&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001880)=""/154, 0x9a}, {&(0x7f0000001940)=""/154, 0x9a}, {&(0x7f0000001a00)=""/248, 0xf8}, {&(0x7f0000001b00)=""/221, 0xdd}, {&(0x7f0000000580)}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/110, 0x6e}], 0x9, &(0x7f0000001d80)=""/191, 0xbf, 0x10001}, 0x2022)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002540), 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f00)={r3, r3, 0x3}, 0x10)
recvmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/246, 0xf6}], 0x4, &(0x7f00000004c0)=""/83, 0x53, 0x3da}, 0x40000041)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xaf, 0x0, &(0x7f0000000280)=""/175}, 0x28)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)={&(0x7f0000002580)='./file0\x00', r3}, 0x10)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'bridge_slave_0\x00'})
r5 = socket$kcm(0x2, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2)
sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
close(r2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x890b, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x50, &(0x7f0000001e80)={0x0, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c00)=r6, 0x4)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000002500))
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001f40)={r2, r7})
recvmsg(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002600)=""/203, 0xcb}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x1}, 0x142)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r8, &(0x7f0000847f95), 0x0}, 0x18)

12:12:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:19 executing program 5:

12:12:19 executing program 2:
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d)

12:12:19 executing program 4:

12:12:19 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x1000000000016)

[  563.531294] binder: 20714:20715 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:19 executing program 4:

12:12:19 executing program 5:

12:12:19 executing program 2:
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, 0x0, 0x0)

12:12:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:19 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})

12:12:19 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000001600)=ANY=[@ANYRESHEX], 0x12)

[  563.927256] binder: 20735:20737 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:20 executing program 3:
socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x29, 0x2, 0x0)
recvmsg(r1, &(0x7f00000024c0)={&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002000)=""/171, 0xab}, {&(0x7f00000020c0)=""/16, 0x10}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002140)=""/168, 0xa8}, {&(0x7f0000002200)=""/133, 0x85}, {&(0x7f00000022c0)=""/235, 0xeb}], 0x6, &(0x7f0000002440)=""/73, 0x49, 0x6}, 0x40002000)
recvmsg(r1, &(0x7f0000001e40)={&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001680)=""/234, 0xea}, {&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001880)=""/154, 0x9a}, {&(0x7f0000001940)=""/154, 0x9a}, {&(0x7f0000001a00)=""/248, 0xf8}, {&(0x7f0000001b00)=""/221, 0xdd}, {&(0x7f0000000580)}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/110, 0x6e}], 0x9, &(0x7f0000001d80)=""/191, 0xbf, 0x10001}, 0x2022)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002540), 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f00)={r3, r3, 0x3}, 0x10)
recvmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/246, 0xf6}], 0x4, &(0x7f00000004c0)=""/83, 0x53, 0x3da}, 0x40000041)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xaf, 0x0, &(0x7f0000000280)=""/175}, 0x28)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)={&(0x7f0000002580)='./file0\x00', r3}, 0x10)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'bridge_slave_0\x00'})
r5 = socket$kcm(0x2, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2)
sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
close(r2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x890b, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x50, &(0x7f0000001e80)={0x0, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c00)=r6, 0x4)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000002500))
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001f40)={r2, r7})
recvmsg(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002600)=""/203, 0xcb}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x1}, 0x142)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r8, &(0x7f0000847f95), 0x0}, 0x18)

12:12:20 executing program 2:
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040), 0x52d)

12:12:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:20 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x1000000000016)

12:12:20 executing program 5:

12:12:20 executing program 4:

12:12:20 executing program 4:

[  564.423906] binder: 20747:20750 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:20 executing program 5:

12:12:20 executing program 2:
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/\f\x89')

12:12:20 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00')

12:12:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:20 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000002000), 0x1000)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)

[  564.776999] binder: 20769:20770 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:21 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x2, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f00000009c0), 0x4)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0xfffffffffffffffb, 0x160, 0x7, 0x0, 0x0, [{r0, 0x0, 0x3}, {r0, 0x0, 0x25f}, {r0, 0x0, 0x1000}, {r0, 0x0, 0x1d9}, {r0, 0x0, 0x7}, {r0, 0x0, 0x3}, {r0, 0x0, 0x6}]})
mlockall(0x3)
creat(0x0, 0x0)
io_setup(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})

12:12:21 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00')

12:12:21 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x1000000000016)

12:12:21 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, 0x0})

12:12:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

[  565.341104] binder: 20780:20784 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:21 executing program 4:
prctl$PR_GET_NAME(0x10, &(0x7f00000011c0)=""/194)

12:12:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:21 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$lock(r1, 0x6, &(0x7f00000003c0)={0x1, 0x1, 0x2})
get_robust_list(0x0, 0x0, &(0x7f00000005c0))
fcntl$setflags(r1, 0x2, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
close(r3)
r4 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x81, 0x3ff})
flistxattr(r2, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r4, r6, &(0x7f0000000180), 0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  565.529979] binder: 20794:20795 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:21 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x0)

12:12:21 executing program 4:
prctl$PR_GET_NAME(0x10, &(0x7f00000011c0)=""/194)

12:12:21 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
ioctl$TCSETSF(r0, 0x5437, 0x0)

12:12:21 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000002000), 0x1000)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)

12:12:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:22 executing program 4:
prctl$PR_GET_NAME(0x10, &(0x7f00000011c0)=""/194)

12:12:22 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')

[  566.033340] binder: 20818:20825 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:22 executing program 4:
prctl$PR_GET_NAME(0x10, &(0x7f00000011c0)=""/194)

12:12:22 executing program 1:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x0)

12:12:22 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000500))
syz_open_pts(r0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000480), 0x80, 0x0, 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/204, 0xcc}, {&(0x7f0000002e80)=""/235, 0xeb}], 0x2, 0x0, 0x0, 0xd1ae}, 0x4}, {{0x0, 0x0, 0x0}}], 0x3, 0x12000, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000380)=""/140)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
pipe2(&(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
pipe(&(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_type(r4, &(0x7f0000000640)='threaded\x00', 0x9)
write(r6, &(0x7f0000000340), 0x10000014c)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00')
socket$inet(0x10, 0x3, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x2, "edb435aa6c503046"})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000005c0)=[@mss], 0x1)
getsockname$inet6(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000340))
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r7=>0x0})
fcntl$getown(r0, 0x9)
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r7+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:12:22 executing program 4:
prctl$PR_GET_NAME(0x10, 0x0)

12:12:22 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$lock(r1, 0x6, &(0x7f00000003c0)={0x1, 0x1, 0x2})
get_robust_list(0x0, 0x0, &(0x7f00000005c0))
fcntl$setflags(r1, 0x2, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
close(r3)
r4 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x81, 0x3ff})
flistxattr(r2, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r4, r6, &(0x7f0000000180), 0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

12:12:22 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
io_setup(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)

12:12:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)

12:12:22 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)

[  567.242115] binder: 20865:20873 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:23 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$lock(r1, 0x6, &(0x7f00000003c0)={0x1, 0x1, 0x2})
get_robust_list(0x0, 0x0, &(0x7f00000005c0))
fcntl$setflags(r1, 0x2, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
close(r3)
r4 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x81, 0x3ff})
flistxattr(r2, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r4, r6, &(0x7f0000000180), 0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

12:12:23 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0xa001})

12:12:23 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9)

12:12:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:24 executing program 5:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x3, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00')

[  568.032890] binder: 20898:20904 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:24 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/4\x00')

12:12:24 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_team\x00', 0x600})

12:12:24 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents(r1, &(0x7f0000000200)=""/143, 0x29)
getdents(r1, &(0x7f0000000040)=""/63, 0x3f)

12:12:24 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

12:12:24 executing program 4:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@random={'security.', 'ramfs\x00'})

12:12:24 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/4\x00')

12:12:24 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000500)=0x64)
syz_open_pts(r0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000480), 0x80, 0x0, 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002f80)=[{0x0}], 0x1, 0x0, 0x0, 0xd1ae}, 0x4}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000380)=""/140)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
pipe2(&(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
pipe(&(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$cgroup_type(r3, &(0x7f0000000640)='threaded\x00', 0x9)
write(r5, &(0x7f0000000340), 0x10000014c)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00')
socket$inet(0x10, 0x3, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r6=>0x0})
fcntl$getown(r0, 0x9)
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r6+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:12:24 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x6040, 0x0)

12:12:24 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000500)=0x64)
syz_open_pts(r0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000480), 0x80, 0x0, 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/204, 0xcc}, {&(0x7f0000002e80)=""/235, 0xeb}], 0x2, 0x0, 0x0, 0xd1ae}, 0x4}, {{0x0, 0x0, 0x0}}], 0x3, 0x12000, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000380)=""/140)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
pipe2(&(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
pipe(&(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_type(r4, &(0x7f0000000640)='threaded\x00', 0x9)
write(r6, &(0x7f0000000340), 0x10000014c)
socket$inet(0x10, 0x3, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000005c0)=[@mss={0x2, 0x30035917}, @timestamp], 0x2)
connect$unix(r2, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r7=>0x0})
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r7+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:12:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
setrlimit(0x400000000000007, &(0x7f0000000140))
dup(r0)

12:12:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:24 executing program 5:
pipe(&(0x7f0000000180))
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/4\x00')

12:12:24 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$lock(r1, 0x6, &(0x7f00000003c0)={0x1, 0x1, 0x2})
get_robust_list(0x0, 0x0, &(0x7f00000005c0))
fcntl$setflags(r1, 0x2, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
close(r3)
r4 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x81, 0x3ff})
flistxattr(r2, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r4, r6, &(0x7f0000000180), 0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)

12:12:24 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="677c5c9a", 0x4}], 0x1)

12:12:25 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070007020000000000000000050000"], 0x10}}, 0x0)

[  568.992948] binder: 20958 RLIMIT_NICE not set
12:12:25 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100))
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x4)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3f})

[  569.039651] binder: 20956:20961 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:25 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

12:12:25 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f)
r1 = gettid()
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1104400000016)

12:12:25 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/4)

12:12:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000500)=0x64)
syz_open_pts(r0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000480), 0x80, 0x0, 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/204, 0xcc}, {&(0x7f0000002e80)=""/235, 0xeb}], 0x2, 0x0, 0x0, 0xd1ae}, 0x4}, {{0x0, 0x0, 0x0}}], 0x3, 0x12000, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000380)=""/140)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
pipe2(&(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
pipe(&(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_type(r4, &(0x7f0000000640)='threaded\x00', 0x9)
write(r6, &(0x7f0000000340), 0x10000014c)
socket$inet(0x10, 0x3, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000005c0)=[@mss={0x2, 0x30035917}, @timestamp], 0x2)
connect$unix(r2, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r7=>0x0})
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r7+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:12:26 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40841, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)

[  569.915310] binder: 20997 RLIMIT_NICE not set
[  569.962128] binder: 20995:21002 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:26 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TCSETS(r1, 0x5402, 0x0)

12:12:26 executing program 5:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
close(0xffffffffffffffff)

12:12:26 executing program 2:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2100, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x297ef)
close(r1)

12:12:26 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:26 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
dup3(r0, r2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x2ae, 0x0)

12:12:26 executing program 5:
creat(0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000004080501ff0080fffdffff010a0000000c000300010000007d0a00010c0002000008000000000000"], 0x2c}}, 0x0)

12:12:26 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

[  570.502684] netlink: 'syz-executor5': attribute type 3 has an invalid length.
[  570.510031] netlink: 'syz-executor5': attribute type 2 has an invalid length.
12:12:26 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x5}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

[  570.587803] netlink: 'syz-executor5': attribute type 3 has an invalid length.
[  570.595359] netlink: 'syz-executor5': attribute type 2 has an invalid length.
12:12:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

[  570.893897] binder: 21051 RLIMIT_NICE not set
12:12:27 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)

12:12:27 executing program 4:
socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
shmctl$IPC_STAT(0x0, 0x2, 0x0)

12:12:27 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:27 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00')
perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user./'], 0x0, 0x0, 0x0)

12:12:27 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clock_adjtime(0x3, 0x0)

[  570.943735] binder: 21050:21054 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:27 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:27 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSBRK(r1, 0x5409, 0x38)

12:12:27 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000050c0), 0xfdc0)
stat(&(0x7f0000000500)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f00000030c0), 0x436)
r1 = gettid()
open$dir(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x0)
tkill(r1, 0x1000000000016)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)

12:12:27 executing program 5:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
unlink(&(0x7f00000000c0)='./file0\x00')
dup3(r0, r1, 0x0)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000026ff8)='./file0\x00', 0x0, 0x1000, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socket$inet6(0xa, 0x0, 0x0)

12:12:27 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r3 = dup2(r1, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1)
setsockopt$inet6_opts(r3, 0x29, 0x0, 0x0, 0x0)

12:12:27 executing program 4:
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

12:12:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:27 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
fcntl$setpipe(r1, 0x407, 0x0)

[  571.801365] binder: 21110:21113 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:28 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:28 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:28 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x90b, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0)

12:12:28 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:28 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c3654c69000b3e0f11581010196f048fcd08c42341797a9f00ae34bc00000f2902")

12:12:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

[  572.808621] audit: type=1326 audit(1546085548.843:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21144 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
[  572.830098] binder: 21141:21148 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  573.580616] audit: type=1326 audit(1546085549.633:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21144 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0
12:12:30 executing program 2:
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00')
rmdir(0x0)

12:12:30 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x52}}}}]}, 0x48}}, 0x0)

12:12:30 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r0, 0x0)

12:12:30 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:30 executing program 5:
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88))
msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f4"], 0x1, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})

12:12:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{}]}, 0x2)
write$cgroup_int(r0, &(0x7f0000000040), 0x12)

[  574.377876] binder: 21161:21174 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)

12:12:30 executing program 3:
r0 = socket$inet6(0xa, 0x100000003, 0x3a)
accept4(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

12:12:30 executing program 1:
mkdir(0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070")
r1 = socket$inet6(0xa, 0x100000003, 0x3a)
accept4(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80, 0x0)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

12:12:30 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:31 executing program 2:
r0 = inotify_init()
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x800)

12:12:31 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r1, 0x208204)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000003700)={0x0, 0x40000000000006, 0x100000001, 0x0, 0xca})

12:12:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
sendfile(r0, r1, 0x0, 0x1)

12:12:31 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:31 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:31 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

[  575.392168] binder: 21218:21222 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:31 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:31 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, 0x0)
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

[  575.495507] binder: 21218:21232 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:31 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)

12:12:31 executing program 4:
syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00')
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0)
chdir(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)
r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5)
connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0)
ioctl$EVIOCGSW(r0, 0x8040451b, 0x0)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000140))

12:12:31 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:31 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:32 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffd2)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140))
socket$inet6(0xa, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000480)="034c83828bb060821ef6055b9c24a0eef5cde307b4faa49e2894586fec5d13eb8fb86642112458be0312d80b9b3ae2bc7f8ee09a4869a3bfafa3db6b91f776ab224d8b0cea29b278187b1f8e5c5c1a421073dfa4f30a4b72b513f07495a4af1bc6f766b49b49d7f2c515ae179e05ace038ab5c228b03f9791b8c1a5f3877d48547436b93498030d4da3e8815c2a1"}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x79, &(0x7f0000000100)=""/121}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000020b7050000000000006a0a00fe000000008500000012000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xf000, 0xa1, 0x0, &(0x7f0000000800)="121d9b1531a30028000000000000d5acd1e550bb67224bd1b9308b23941a7794a956dad0b8c4a63df3ea1be3ed9ebf55247a0e7d1b67f224240000f4bcecf998c4f1fdead6538886773645c0d32ec2329a8a67917e9556114f704a60ca84979f0bcb1889bc979d40d3c7b3481f0d0672be5921e4ab0c8b46708866a6246aa5e9b9f16451d5a0d74baa263e463bbea90fce2c93aaba545fd24661f1ad1366aec685", 0x0, 0x6db8}, 0x28)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070")

12:12:32 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x100000, 0x8000000000001ac)

12:12:32 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:32 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:32 executing program 4:
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x2a1, &(0x7f00000002c0)=""/251}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2})

12:12:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

[  576.320089] binder: 21274:21275 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  576.373959] binder: 21275 RLIMIT_NICE not set
12:12:32 executing program 3:
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:32 executing program 5:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00')
syz_genetlink_get_family_id$tipc2(0x0)
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002)
lsetxattr$security_evm(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0)

[  576.423919] binder: 21274:21286 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:32 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:12:32 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
close(r1)

12:12:32 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:32 executing program 2:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fcntl$dupfd(r2, 0x0, r0)

12:12:32 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:32 executing program 5:
r0 = memfd_create(&(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00')
sendfile(r0, r1, 0x0, 0x40000000009)

12:12:33 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06w=\xea\x8f\xe2\xa4\xe3\x85!M\xeb&')
close(r1)

12:12:33 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0)

12:12:33 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:33 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x453)
write$binfmt_elf64(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x3ee)

12:12:33 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r1, 0x1, 0x0, 0x20000003)

[  577.354025] binder: 21338:21339 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  577.394236] binder: 21339 RLIMIT_NICE not set
12:12:33 executing program 1:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
creat(0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(0x0, 0x0)

12:12:33 executing program 4:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x13)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x3)

12:12:33 executing program 3:
socket$netlink(0x10, 0x3, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

12:12:33 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
close(r0)

[  577.440591] binder: 21338:21343 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:33 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, 0x0, 0x0)

12:12:33 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
clone(0x201fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
read(r0, 0x0, 0x0)

12:12:33 executing program 5:
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f0000000180))
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)

12:12:33 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14)
sendmmsg(r0, &(0x7f00000092c0), 0x41, 0x0)

[  577.812599] input: syz1 as /devices/virtual/input/input30
12:12:33 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, 0x0, 0x0)

12:12:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:34 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
clone(0x201fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
read(r0, 0x0, 0x0)

12:12:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@dev}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in=@rand_addr=0x6, @in=@local, 0x4e22, 0x7e5e, 0x4e20, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, {0x1, 0x8001, 0x4}}, {{@in=@local}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x8, 0x1ae00000000, 0x8, 0x2}}, 0xe8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x802, 0x0)
write(r2, &(0x7f0000000240)="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", 0xfc)

12:12:34 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, 0x0, 0x0)

[  578.217888] input: syz1 as /devices/virtual/input/input31
[  578.267449] netlink: 216 bytes leftover after parsing attributes in process `syz-executor2'.
[  578.309458] netlink: 216 bytes leftover after parsing attributes in process `syz-executor2'.
12:12:36 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1000000000000c, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), 0x0}, 0x20)

12:12:36 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

12:12:36 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1000000000000c, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x2c)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000100), 0x0}, 0x18)

12:12:36 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080), 0x0)

12:12:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:36 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8c, 0xda4, 0x5, {"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"}}, {0x0, "7279f77505aa4757c39e4f37a221db1e91676635cfd7cd7f56ffa4fbd7ce20fd78b9e64a459603a35ebffc6dea5435cc4ad19852b486fa7f006a5a11c5a4ab59575490cc596a15c3307ed75aee0dd308561895a8698fb0258c168c41fa85eb98574423db76ed923b21bf9c333783a8b39c76baf64f"}}, 0x0, 0xe1b, 0x0, 0x1}, 0x20)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=""/240, &(0x7f0000000300)=0xf0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000001740)=0xc)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x8)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x2000005)
flock(r2, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000480)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="eba2a7882f095af51a5d472c6fda058cf0b114f4687a703bb62fb29f59a0b5d5c4d021db86397137eda64715ff17e86787f4d35312f0386d674ede93790eefaaa29be78c961e26a5666e4556e13ae4bbf76b716e4146c51956009640cb918cfc2a67c1fee98e378ab0b8c2", 0x6b}], 0x1, 0x0, 0x0, 0x811}, 0x4000040)
flock(0xffffffffffffffff, 0xa)
flock(r1, 0x9)
ioctl$TIOCCBRK(r3, 0x5428)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
fcntl$setpipe(r2, 0x407, 0xe1)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x6, 0x4, 0x800})

12:12:36 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080), 0x0)

12:12:36 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0)

12:12:36 executing program 1:
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
creat(0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
unlink(0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

12:12:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:36 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x805)

12:12:36 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080), 0x0)

12:12:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:37 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1)

12:12:37 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x805)

[  581.195060] binder: 21441:21442 Acquire 1 refcount change on invalid ref 0 ret -22
12:12:37 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1)

[  581.249901] binder: 21441:21442 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:37 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x805)

[  581.360857] binder: 21441:21448 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/207, 0xcf}], 0x1, 0x0)

12:12:37 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1)

12:12:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="1f0000001e0007f1e9f5ff0200040000000000040000dd00000003728d0417", 0x1f)

12:12:38 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400028)

12:12:38 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x805)

12:12:38 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{}], 0x1)

12:12:38 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x400100)

12:12:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

[  582.397478] binder: 21483:21488 Acquire 1 refcount change on invalid ref 0 ret -22
[  582.424427] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
12:12:38 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x805)

[  582.518598] binder: 21483:21488 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  582.559083] binder: 21488 RLIMIT_NICE not set
12:12:38 executing program 1:
ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, 0x0, 0x0)
sendmmsg(r0, &(0x7f000000a000)=[{{&(0x7f0000005c00)=@llc={0x1a, 0x309, 0x3, 0xfdaf, 0x80000001, 0xd28, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000005d00)=[{&(0x7f00000075c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x40040}, 0x4}, {{&(0x7f0000006340)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000009dc0)=[{&(0x7f00000064c0)}], 0x1, 0x0, 0x0, 0x4000}, 0x1}], 0x2, 0x4)

[  582.610048] binder: 21483:21496 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:38 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x805)

12:12:38 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{}], 0x1)

12:12:38 executing program 5:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8))
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00')

12:12:38 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x805)

12:12:39 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

12:12:39 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{}], 0x1)

12:12:39 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
write(r1, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140))

12:12:39 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, 0x0, 0x0, 0x805)

[  583.080326] input: syz1 as /devices/virtual/input/input32
[  583.205851] input: syz1 as /devices/virtual/input/input33
12:12:39 executing program 2:
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = getpgid(0x0)
fcntl$setsig(r1, 0xa, 0x12)
r4 = dup2(r1, r2)
fcntl$setown(r4, 0x8, r3)
tkill(r0, 0x16)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

12:12:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:39 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e0", 0x24}], 0x1)

12:12:39 executing program 1:
modify_ldt$write2(0x11, &(0x7f0000c8cff7), 0x10)
modify_ldt$read(0x0, 0x0, 0x0)

12:12:39 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, 0x0, 0x0, 0x805)

12:12:39 executing program 5:
r0 = socket(0x11, 0x4000000000080002, 0x0)
sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0xc, 0x1, 0x101}], 0xc}}], 0x1, 0x0)

[  583.488025] binder: 21539:21540 Acquire 1 refcount change on invalid ref 0 ret -22
[  583.527401] binder: 21539:21540 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:39 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e0", 0x24}], 0x1)

12:12:39 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, 0x0, 0x0, 0x805)

12:12:39 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x3c1, 0x3, 0x268, [0x20000600], 0x0, 0x0, &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bcsf0\x00', 'veth0_to_bridge\x00', 'bridge0\x00', 'nr0\x00', @dev, [], @broadcast, [], 0x70, 0xc8, 0xf8}, [@common=@redirect={'redirect\x00', 0x4, {{0xffffffffffffffff}}}, @snat={'snat\x00', 0xc, {{@broadcast, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffbfffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'hwsim0\x00', 'ip_vti0\x00', 'veth0_to_team\x00', 'sit0\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xe0}}, @common=@nflog={'nflog\x00', 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x0, "d51b3858fdb32e0c8ef4e03da89b3f651fec4af6a1b9ff9ccf9df7adf6111b077463711155398a1557c0c407185bb01892d2662ded7f674847d31f073850281a"}}}}]}]}, 0x300)

[  583.662521] binder: 21539:21548 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:39 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e0", 0x24}], 0x1)

[  583.786290] kernel msg: ebtables bug: please report to author: Wrong len argument
12:12:39 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380), 0x0, 0x805)

12:12:39 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3c", 0x36}], 0x1)

12:12:42 executing program 2:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001f00)=[@window={0x3, 0x2, 0x4}], 0x1)
write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000180))
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000480)='security.ima\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x4}, 0x3d5)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)

12:12:42 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x181)
stat(0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x3b89, 0x2, 0x20, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d3, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x4}, 0x3d5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4)

12:12:42 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4004556c, &(0x7f0000000140)='syz0\x00')
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

12:12:42 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380), 0x0, 0x805)

12:12:42 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3c", 0x36}], 0x1)

12:12:42 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000200), 0xffffffffffffff46, 0x0, 0x0, 0x0)
close(r2)

[  586.517973] input: syz1 as /devices/virtual/input/input35
[  586.567938] input: syz1 as /devices/virtual/input/input36
12:12:42 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380), 0x0, 0x805)

12:12:42 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3c", 0x36}], 0x1)

12:12:42 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:42 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

12:12:42 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0xf0}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x1c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0)

12:12:43 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600", 0x3f}], 0x1)

12:12:43 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:43 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x805)

12:12:43 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x2006124)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xa5, 0x8946, 0x0, 0x0, 0x7}, 0x0)

12:12:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$inet(0x2, 0x3, 0x2)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

[  587.020694] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š"
12:12:43 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000580)=0xfffffffffffffffe, 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
socket$inet_udplite(0x2, 0x2, 0x88)

12:12:43 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:43 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600", 0x3f}], 0x1)

12:12:43 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x805)

12:12:43 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600", 0x3f}], 0x1)

12:12:43 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:43 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x805)

12:12:43 executing program 5:

12:12:43 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff", 0x44}], 0x1)

12:12:43 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:43 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x0)

12:12:44 executing program 2:

12:12:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6, 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0xfffffe36)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

12:12:44 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff", 0x44}], 0x1)

12:12:44 executing program 5:

12:12:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:44 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x0)

12:12:44 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375728874790000000000000000000000000000000000000000000000006a0000000de9583793eae36fb3258f50064d0be0acd142dc4ae7470b303f113d97aec50de93c3f22e96e971fe6d0a1f8728717cc59724a46e4f47375f8970cb3a648a7a04e5d2f8a1a5ca917866da94394c044d03cbe80a0a7851c7f0f34757c9dc8d575485821045f62e1b0bc38"], 0x0)

[  588.275723] binder: 21674:21676 Acquire 1 refcount change on invalid ref 0 ret -22
12:12:44 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x20, 0x20000000000001, 0x20000000000001, 0x0, 0x0}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0, 0x3}, 0x20)

[  588.319157] binder: 21674:21676 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  588.420877] binder: 21674:21684 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:44 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x0)

12:12:44 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff", 0x44}], 0x1)

12:12:44 executing program 5:

12:12:44 executing program 2:

12:12:44 executing program 5:

12:12:45 executing program 1:

12:12:45 executing program 4:

12:12:45 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7", 0x46}], 0x1)

12:12:45 executing program 2:

12:12:45 executing program 5:

12:12:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

[  589.284207] binder: 21708:21709 Acquire 1 refcount change on invalid ref 0 ret -22
[  589.342554] binder: 21708:21709 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:45 executing program 2:

12:12:45 executing program 1:

12:12:45 executing program 5:

[  589.386266] binder: 21714 RLIMIT_NICE not set
12:12:45 executing program 4:

12:12:45 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7", 0x46}], 0x1)

[  589.503074] binder: 21708:21716 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:45 executing program 5:

12:12:45 executing program 4:

12:12:45 executing program 1:

12:12:45 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7", 0x46}], 0x1)

12:12:45 executing program 2:

12:12:45 executing program 5:

12:12:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:46 executing program 1:

12:12:46 executing program 4:

12:12:46 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5", 0x47}], 0x1)

12:12:46 executing program 5:

12:12:46 executing program 2:

12:12:46 executing program 4:

[  590.249708] binder: 21751:21752 Acquire 1 refcount change on invalid ref 0 ret -22
[  590.264425] binder: 21751:21752 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  590.275014] binder: 21752 RLIMIT_NICE not set
12:12:46 executing program 1:

12:12:46 executing program 5:

12:12:46 executing program 2:

12:12:46 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5", 0x47}], 0x1)

[  590.321988] binder: 21751:21753 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:46 executing program 4:

12:12:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:47 executing program 2:

12:12:47 executing program 5:

12:12:47 executing program 1:

12:12:47 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9208000520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5", 0x47}], 0x1)

12:12:47 executing program 4:

12:12:47 executing program 1:

12:12:47 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="96bd27b2af670da75663ab2d466d4ebd87d61c9e8c69f4a69c34a564eb35d31c34839b20c8", 0x25, 0x0)

[  591.170083] binder: 21777:21778 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:47 executing program 3:

12:12:47 executing program 5:

12:12:47 executing program 4:

[  591.297078] binder: 21777:21779 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  591.375069] audit: type=1400 audit(1546085567.433:149): apparmor="DENIED" operation="setprocattr" info="sockcreate" error=-22 profile="unconfined" pid=21786 comm="syz-executor2"
12:12:47 executing program 3:

12:12:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:48 executing program 4:

12:12:48 executing program 1:

12:12:48 executing program 2:

12:12:48 executing program 5:

12:12:48 executing program 3:

12:12:48 executing program 3:

[  592.055626] binder: 21806:21807 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:48 executing program 5:

[  592.096938] binder: 21807 RLIMIT_NICE not set
12:12:48 executing program 2:

12:12:48 executing program 4:

12:12:48 executing program 1:

[  592.144367] binder: 21806:21808 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:48 executing program 3:

12:12:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:48 executing program 5:

12:12:48 executing program 1:

12:12:48 executing program 2:

12:12:48 executing program 4:

12:12:48 executing program 3:

12:12:49 executing program 5:

12:12:49 executing program 3:

12:12:49 executing program 1:

[  592.943467] binder: 21830:21831 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  592.978071] binder: 21831 RLIMIT_NICE not set
12:12:49 executing program 2:

12:12:49 executing program 4:

[  593.024663] binder: 21830:21833 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:49 executing program 3:

12:12:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:49 executing program 5:

12:12:49 executing program 1:

12:12:49 executing program 4:

12:12:49 executing program 2:

12:12:49 executing program 3:

12:12:49 executing program 5:

12:12:49 executing program 2:

[  593.830948] binder: 21856:21857 ioctl c0306201 0 returned -14
12:12:49 executing program 1:

12:12:49 executing program 3:

12:12:49 executing program 4:

[  593.880839] binder: 21856:21857 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  594.022512] binder: 21857 RLIMIT_NICE not set
12:12:50 executing program 5:

[  594.069392] binder: 21856:21868 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:50 executing program 3:

12:12:50 executing program 2:

12:12:50 executing program 1:

12:12:50 executing program 4:

12:12:50 executing program 5:

12:12:50 executing program 5:

12:12:50 executing program 3:

12:12:50 executing program 4:

12:12:50 executing program 2:

[  594.723370] binder: 21881:21882 ioctl c0306201 0 returned -14
[  594.746926] binder: 21881:21882 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:50 executing program 1:

[  594.815460] binder: 21885 RLIMIT_NICE not set
[  594.860769] binder: 21881:21882 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:51 executing program 4:

12:12:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:51 executing program 2:

12:12:51 executing program 3:

12:12:51 executing program 5:

12:12:51 executing program 1:

12:12:51 executing program 4:

12:12:51 executing program 2:

12:12:51 executing program 4:

[  595.608121] binder: 21906:21907 ioctl c0306201 0 returned -14
12:12:51 executing program 5:

12:12:51 executing program 3:

[  595.671811] binder: 21906:21907 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:51 executing program 1:

[  595.735682] binder: 21907 RLIMIT_NICE not set
[  595.819211] binder: 21906:21908 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:51 executing program 2:

12:12:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:52 executing program 5:

12:12:52 executing program 4:

12:12:52 executing program 3:

12:12:52 executing program 2:

12:12:52 executing program 1:

12:12:52 executing program 4:

12:12:52 executing program 3:

12:12:52 executing program 1:

12:12:52 executing program 2:

[  596.517518] binder: 21930:21931 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  596.556948] binder: 21931 RLIMIT_NICE not set
12:12:52 executing program 5:

[  596.652840] binder: 21930:21936 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:52 executing program 2:

12:12:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:53 executing program 1:

12:12:53 executing program 4:

12:12:53 executing program 5:

12:12:53 executing program 3:

12:12:53 executing program 2:

12:12:53 executing program 5:

12:12:53 executing program 1:

12:12:53 executing program 2:

12:12:53 executing program 4:

12:12:53 executing program 3:

[  597.405023] binder: 21955:21956 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  597.437742] binder: 21956 RLIMIT_NICE not set
[  597.515141] binder: 21955:21960 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:53 executing program 5:

12:12:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:54 executing program 2:

12:12:54 executing program 3:

12:12:54 executing program 4:

12:12:54 executing program 1:

12:12:54 executing program 5:

12:12:54 executing program 1:

[  598.291547] binder: 21980:21981 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  598.300170] binder: 21981 RLIMIT_NICE not set
12:12:54 executing program 2:

12:12:54 executing program 5:

12:12:54 executing program 3:

[  598.349202] binder: 21980:21984 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:54 executing program 1:

12:12:54 executing program 4:

12:12:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:55 executing program 2:

12:12:55 executing program 5:

12:12:55 executing program 1:

12:12:55 executing program 3:

12:12:55 executing program 4:

12:12:55 executing program 1:

12:12:55 executing program 4:

[  599.205610] binder: 22005:22006 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:55 executing program 3:

12:12:55 executing program 2:

12:12:55 executing program 5:

[  599.312005] binder: 22005:22007 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:55 executing program 1:

12:12:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:56 executing program 4:

12:12:56 executing program 2:

12:12:56 executing program 5:

12:12:56 executing program 3:

12:12:56 executing program 1:

12:12:56 executing program 4:

12:12:56 executing program 1:

12:12:56 executing program 5:

12:12:56 executing program 2:

12:12:56 executing program 3:

[  600.155707] binder: 22030:22031 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  600.180893] binder: 22031 RLIMIT_NICE not set
[  600.245922] binder: 22030:22037 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:56 executing program 1:

12:12:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:57 executing program 4:

12:12:57 executing program 2:

12:12:57 executing program 5:

12:12:57 executing program 3:

12:12:57 executing program 1:

12:12:57 executing program 4:

12:12:57 executing program 5:

12:12:57 executing program 2:

[  601.031396] binder: 22055:22056 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:57 executing program 1:

12:12:57 executing program 3:

[  601.129082] binder: 22055:22059 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:57 executing program 4:

12:12:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:57 executing program 5:

12:12:57 executing program 2:

12:12:57 executing program 3:

12:12:57 executing program 1:

12:12:57 executing program 4:

[  601.502689] binder: 22073:22074 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  601.534645] binder: 22074 RLIMIT_NICE not set
12:12:57 executing program 3:

[  601.586770] binder: 22073:22080 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:57 executing program 2:

12:12:57 executing program 4:

12:12:57 executing program 5:

12:12:57 executing program 1:

12:12:58 executing program 3:

12:12:58 executing program 1:

12:12:58 executing program 2:

12:12:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:58 executing program 4:

12:12:58 executing program 5:

12:12:58 executing program 3:

12:12:58 executing program 2:

12:12:58 executing program 4:

12:12:58 executing program 1:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000001, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0x3cceb664, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4)

12:12:58 executing program 5:

12:12:58 executing program 3:

[  602.502184] binder: 22105:22106 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  602.566297] binder: 22106 RLIMIT_NICE not set
12:12:58 executing program 2:

[  602.622943] binder: 22105:22117 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:58 executing program 3:

12:12:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:12:59 executing program 4:

12:12:59 executing program 5:
delete_module(&(0x7f0000000100)='vboxnet0bdevwlan1\'vmnet0\x00', 0xa00)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0x7f8)

12:12:59 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00')
getdents(r0, &(0x7f0000000100)=""/143, 0x89)

12:12:59 executing program 1:
r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0)
fstatfs(r0, &(0x7f00000000c0)=""/170)

12:12:59 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00')
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0)

12:12:59 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7)
sendfile(r0, r0, &(0x7f0000000480), 0xa198)
lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001480)='security.capability\x00', &(0x7f0000001440)=@v2, 0x14, 0x0)

[  603.349219] binder: 22132:22139 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:12:59 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0x0, r1, 0x0)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0)

[  603.396108] binder: 22142 RLIMIT_NICE not set
12:12:59 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00')
getdents(r0, &(0x7f00000002c0)=""/143, 0xfed8)

[  603.443932] binder: 22132:22144 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:12:59 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0))

12:12:59 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @dev}, 0x8, {0x2, 0x0, @loopback}, 'nr0\x00'})

12:12:59 executing program 4:
syz_open_dev$sndtimer(&(0x7f0000000480)='/dev/snd/timer\x00', 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)

12:13:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:00 executing program 3:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
exit_group(0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x305}, 0x14}}, 0x0)
fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

12:13:00 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x20)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
unshare(0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000000c0))
open$dir(0x0, 0x80004, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x7fffffffe, &(0x7f0000000840)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00', 0x1})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
close(r3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480))
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x1)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401)
ftruncate(r5, 0x2008200)
ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000200))
r6 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0)
ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x400000000000091, 0x0)
ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000240)='syz0\x00')
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113)

12:13:00 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000480)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r0}, {r1}], 0x2, 0x0, &(0x7f0000000340)={0x2}, 0x8)

12:13:00 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108)
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0)
socket$inet6(0x10, 0x100006, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='bdev\x00')
ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000480)={0x5, 0x200000, 0xffffffffffffffff, 0x7fffffff, 0x7ff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
r3 = getpgid(0x0)
r4 = syz_open_procfs(r3, &(0x7f00000001c0)='io\x00')
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000003c0))
ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000240))
sendfile(r2, r2, &(0x7f00000000c0), 0x7f8)

12:13:00 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3f)
ptrace$cont(0x18, r3, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x57})
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)

[  604.223468] binder: 22179:22180 unknown command 25349
[  604.228809] binder: 22179:22180 ioctl c0306201 20012000 returned -22
12:13:00 executing program 3:
futex(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0)

[  604.291665] binder: 22179:22183 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  604.385995] binder: 22179:22183 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:00 executing program 3:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000001, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x3cceb664, 0x0)

12:13:00 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents(r0, &(0x7f0000000100)=""/143, 0xcb)

12:13:00 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x33)

12:13:00 executing program 4:
mkdir(0x0, 0x0)
inotify_init1(0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)

12:13:00 executing program 3:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x9)

[  604.900781] Y­4��`Ò˜: renamed from lo
12:13:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:01 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
get_robust_list(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

12:13:01 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x33)

12:13:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x40000000)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
unlink(&(0x7f00000000c0)='./file0\x00')
r1 = geteuid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000500)=""/206)
r3 = gettid()
ioctl$sock_ifreq(r2, 0x89f7, &(0x7f0000000080)={'team0\x00\x00\x00\x00\x00\x12\x00', @ifru_settings={0x0, 0x0, @te1=0x0}})
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x6)
wait4(0x0, 0x0, 0x0, 0x0)
fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x32, @local, 0x4e20, 0x0, 'nq\x00', 0x1c, 0x0, 0x31}, 0x2c)
chown(&(0x7f0000000280)='./file0\x00', r1, r4)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0xfffffffffffffffe)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x7, 0x40}, 0x2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='eth0$user$#.@\x00', 0xfffffffffffffffe)

12:13:01 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040))

12:13:01 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)

[  605.196728] binder: 22222:22223 unknown command 25349
[  605.202219] binder: 22222:22223 ioctl c0306201 20012000 returned -22
[  605.227596] binder: 22222:22223 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  605.238727] binder: 22223 RLIMIT_NICE not set
12:13:01 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000001c0), 0xa)

[  605.285566] binder: 22222:22227 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:01 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000480)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000))

[  605.420029] IPVS: ftp: loaded support on port[0] = 21
12:13:01 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000140))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
seccomp(0x1, 0x40000000, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x8, 0x2, 0x1, 0x4, 0x8000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
getpgid(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect(r1, &(0x7f0000000680)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x0, 0x8, "2b265b59bf80726553d99119e061fb83156c215cd0688ad2ae5c852c6c086056681a1d686c7bb7b6ea5b1c208ca36039194720dd78cb6d8f64f4b65df6db33", 0x9}, 0x3d)
getsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000300), &(0x7f0000000380)=0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth1\x00', 0x5801})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r2, 0x0}, 0x10)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
fsync(0xffffffffffffffff)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140)=0x3, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)
write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x0, {0x0, 0x4, 0x1}}, 0x14)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100), 0x10)

12:13:01 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x7fd, 0x4)
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e24}, 0x10)

12:13:01 executing program 3:

12:13:02 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')

12:13:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:02 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0)

12:13:02 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x33)

12:13:02 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040))
setresgid(0x0, 0x0, 0x0)

[  606.307770] binder: 22260:22261 unknown command 25349
[  606.313289] binder: 22260:22261 ioctl c0306201 20012000 returned -22
[  606.336314] binder: 22260:22261 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  606.374678] binder: 22261 RLIMIT_NICE not set
12:13:02 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r2 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r1, r2, 0x0, 0x100000001)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

[  606.422291] binder: 22260:22268 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)

12:13:02 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000480)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0)

12:13:02 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x200, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x100000001, 0x20, 0x0, 0x0, "95ea0fd4fb2ccfe58d6279eb6a9bdfb23e8a89b89bfaec96e1c4613d55bf18df"})

12:13:04 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000002280)=[{&(0x7f0000000040)=""/84, 0x54}], 0x1, 0x0)

12:13:04 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syncfs(r0)

12:13:04 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
fcntl$setstatus(r0, 0x4, 0x46c00)
io_setup(0x5, &(0x7f00000006c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef555}])

12:13:04 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0)

12:13:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:04 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)

[  608.412255] syz-executor5 (22252) used greatest stack depth: 53608 bytes left
[  608.497157] binder: 22305:22307 unknown command 287493
[  608.502753] binder: 22305:22307 ioctl c0306201 20012000 returned -22
12:13:04 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents(r0, &(0x7f0000000200)=""/143, 0x29)
getdents(r0, &(0x7f0000000040)=""/63, 0x3f)
getdents64(r0, &(0x7f0000000080)=""/147, 0x93)

12:13:04 executing program 2:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0)

[  608.584272] binder: 22305:22307 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  608.622260] binder: 22307 RLIMIT_NICE not set
12:13:04 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
rmdir(0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r2 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r1, r2, 0x0, 0x100000001)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

[  608.668650] binder: 22305:22313 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:04 executing program 5:
futex(0x0, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0)

12:13:04 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

12:13:04 executing program 2:
r0 = socket$inet6(0x10, 0x80000080002, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d00050b9d566885b16732009b1100b1df136ef75afb0000000000000000000000000000000000000000000000", 0x55}], 0x1}, 0x0)

12:13:05 executing program 5:
r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x20)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
unshare(0x0)
sched_setscheduler(0x0, 0x5, &(0x7f00000000c0))
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0xd, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00', 0x1})
socketpair(0x0, 0x20000000000001, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
close(r1)
socketpair(0x1, 0x0, 0x1, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x1)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0)
ftruncate(r2, 0x2008200)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200))
r3 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000680)='./bus\x00', 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)}, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x400000000000091, 0x0)
ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000240)='syz0\x00')

12:13:05 executing program 3:
getrandom(0x0, 0x0, 0x0)

12:13:05 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00')

12:13:05 executing program 4:
r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x1000000e8)
fcntl$setstatus(r0, 0x4, 0x46c00)
io_setup(0x5, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef555}])

12:13:05 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x32, 0x100000003, 0x6, 0x0, 0xffffffffffffff9c}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)

12:13:05 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00')
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1)

12:13:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:05 executing program 5:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
write(r0, &(0x7f00000001c0), 0xfffffef3)

[  609.605408] binder: 22357:22359 unknown command 287493
[  609.610786] binder: 22357:22359 ioctl c0306201 20012000 returned -22
12:13:05 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x33)

12:13:05 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108)
socket$inet6(0x10, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0)
r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r1, r1, &(0x7f00000000c0), 0x7f8)

12:13:05 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00')
sendfile(r0, r0, 0x0, 0x9)

[  609.695567] binder: 22357:22359 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:13:05 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

[  609.845753] binder: 22357:22371 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  609.866771] syz-executor3 (22376): /proc/22375/oom_adj is deprecated, please use /proc/22375/oom_score_adj instead.
12:13:06 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000200), 0x1000000000000226)

12:13:06 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x1)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

12:13:06 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/204, 0xcc}, {&(0x7f0000000180)=""/38, 0x26}], 0x2, 0x0)

12:13:06 executing program 4:
delete_module(0x0, 0xa00)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0x7f8)

12:13:06 executing program 5:
r0 = memfd_create(&(0x7f00000001c0)='/dev/null\x00', 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000200))

12:13:06 executing program 3:
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0x7f8)

12:13:06 executing program 1:
socket(0x0, 0x0, 0x0)
llistxattr(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='bdev\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0x7f8)

12:13:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f00000001c0)=""/154, 0x9a)

[  610.595639] binder: 22401:22406 unknown command 287493
[  610.601145] binder: 22401:22406 ioctl c0306201 20012000 returned -22
[  610.669945] binder: 22401:22406 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
12:13:06 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00')
write$cgroup_int(r0, &(0x7f0000000340), 0x12)

12:13:06 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0x10, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_OFF(r0, 0x7002)

[  610.716043] binder: 22409 RLIMIT_NICE not set
[  610.762019] binder: 22401:22406 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:07 executing program 5:
r0 = socket$inet6(0x10, 0x80000080002, 0x9)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="ddf9899fd1299700ea0817b5b4e0e822", 0x10}], 0x1}, 0x0)

12:13:07 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

12:13:07 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000000000"])

12:13:07 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0)
fcntl$setstatus(r0, 0x4, 0x46c00)
io_setup(0x5, &(0x7f00000006c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef555}])

12:13:07 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00')
write$input_event(r0, 0x0, 0xfe14)

12:13:07 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000480)='/dev/snd/timer\x00', 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, &(0x7f0000000340)={0x2}, 0x8)

12:13:07 executing program 5:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x0)

12:13:07 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_OFF(r0, 0x7002)

12:13:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)

[  611.661974] binder: 22446:22451 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:07 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

12:13:07 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

12:13:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0})

12:13:08 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080))

[  612.044928] binder_alloc: 22446: binder_alloc_buf, no vma
[  612.050751] binder: 22464:22465 transaction failed 29189/-3, size 0-0 line 2973
12:13:08 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
rmdir(0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r1, r2, 0x0, 0x100000001)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[  612.123173] binder_alloc: 22446: binder_alloc_buf, no vma
[  612.128954] binder: 22464:22467 transaction failed 29189/-3, size 0-0 line 2973
[  612.138487] binder: undelivered TRANSACTION_ERROR: 29189
[  612.145754] binder: undelivered TRANSACTION_ERROR: 29189
12:13:08 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xd391)

12:13:08 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='oom_adj\x00')
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/126, 0x7e}], 0x1, 0x0)

12:13:08 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0)

12:13:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)

[  612.656778] binder: 22483:22491 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:08 executing program 4:
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246)
ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f00000000c0)=""/174)

12:13:08 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000000c0))

12:13:08 executing program 5:
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0)

12:13:08 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

12:13:09 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r2 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r1, r2, 0x0, 0x100000001)

12:13:09 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents(r0, &(0x7f0000000200)=""/143, 0x10a)
getdents(r0, 0x0, 0x0)

12:13:09 executing program 4:
keyctl$join(0x1, &(0x7f00000001c0)={'syz'})

12:13:09 executing program 1:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/threal-se\x01\x00\x00\x00\x01\x00\x00\x00fscreate\x00', 0x2, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3f)
ptrace$cont(0x18, r3, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x57})
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)

12:13:09 executing program 4:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2b)
ptrace$cont(0x18, r0, 0x0, 0x0)
clock_adjtime(0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  613.304874] ptrace attach of "/root/syz-executor1"[22526] was attempted by "/root/syz-executor1"[22527]
12:13:09 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000080))

[  613.375449] ptrace attach of "/root/syz-executor4"[22531] was attempted by "/root/syz-executor4"[22532]
12:13:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

[  613.576775] binder: 22540:22543 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:09 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

12:13:09 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents(r0, &(0x7f0000000040)=""/63, 0x3f)
getdents64(r0, &(0x7f0000000080)=""/147, 0x93)

12:13:09 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x888)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000100)='./file0\x00')

12:13:09 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

12:13:09 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

12:13:09 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7)
sendfile(r0, r0, &(0x7f0000000480), 0xa198)

12:13:09 executing program 5:
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00')

12:13:09 executing program 3:
futex(0x0, 0x200000000084, 0x0, 0x0, 0x0, 0x0)

12:13:10 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

12:13:10 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:13:10 executing program 3:
perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x100000073)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  614.284771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
12:13:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:10 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x200, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x100000001, 0x0, 0x0, 0x0, "95ea0fd4fb2ccfe58d6279eb6a9bdfb23e8a89b89bfaec96e1c4613d55bf18df"})

12:13:10 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x40000410, 0x9e, "52eaf3f3dd6894cb0ab3db9c3a53e12b69f4b4f5a31233a78911c3bd67d3efe760c9bfcff02d6e0b2c6335fb2a409af77c2d397f90a51b8233894a70ac7f5875733aa33e2eec44669e15995b1e46a065dc535157d477650077ddabb32986e8a525c98e7c627ab4446aac8e0e6e060600cb52dcc36887ce232184c86856feb50d9dfc582c049183e616b3cb44455502e3ff9980a4405f280372a95212bdc3"})

[  614.350087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  614.425781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  614.485020] binder: 22592 RLIMIT_NICE not set
12:13:10 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x10)

12:13:10 executing program 4:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/77, 0x4d}, 0x120)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)

[  614.535200] binder: 22591:22595 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  614.555170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
12:13:10 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f00000001c0))
close(r2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
write$P9_RLINK(r1, &(0x7f0000000040)={0x7}, 0x7)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)

[  614.793022] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.800009] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.806991] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.813969] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.820800] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.827678] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.834735] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.841546] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.848439] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.855542] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.862474] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.869312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.876288] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.883168] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
12:13:10 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x2a, 0x29, 0x2, {0xa0000000000000, [{{0x2, 0x1, 0x3}, 0xd0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x80, 0x3, 0x5}}}, 0x18)
bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x0, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f00000000c0)="857371ef7f45f677f1355d1899479ea56a2195acc2372fbeaa6752e60250880b419e4c192b6a47c787868f9197ebe8")
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003)
syz_genetlink_get_family_id$team(0x0)
listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, 0x0)

[  614.889996] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.896902] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.903761] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.910577] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.917440] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.924329] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.931178] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
12:13:11 executing program 1:
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00')
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)
r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0)

[  614.938049] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.944890] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.951755] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.958539] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.965410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.972268] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.979075] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.985980] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  614.993267] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.000105] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.007041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.013986] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.020812] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.027721] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.034610] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.041418] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.048333] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.055235] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.062202] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.069012] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.075910] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.082810] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.089645] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.096581] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.103454] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.110257] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.117170] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.124083] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.130901] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.137800] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.144687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.151534] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.158465] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.165343] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.172253] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.179025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.185962] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.193273] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.200084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.206964] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.213846] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.220652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.227560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.234426] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.241340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.248302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.255196] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.262467] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.269277] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.276199] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.283085] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.289963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.296810] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.303715] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.310564] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.317432] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  615.346883] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.353907] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.360715] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.367656] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.376990] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.383830] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.390639] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.397525] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.404384] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.411214] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.418052] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.425000] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.431846] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.438665] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.445541] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.452389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.459238] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.466121] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.472997] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.479827] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.486727] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.493569] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.500397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.507330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.514277] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.521079] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.528006] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.534859] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.541763] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.548568] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.555450] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.562318] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.569143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.576126] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.583042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.589877] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.596772] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.603623] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.610423] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.617352] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.624302] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.631098] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.638020] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.644909] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.651775] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.658548] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.665380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.672289] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.679122] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.686032] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.692927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.699749] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.706633] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.713547] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.720369] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.727258] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.734094] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.740919] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.747795] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.754673] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.761487] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.768370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.775232] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.782161] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.788972] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
12:13:11 executing program 1:
socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, 0x0)

12:13:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
syz_open_pts(r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
pipe2(&(0x7f0000000680), 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  615.795852] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.802708] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.809515] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.816429] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.823291] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.830151] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.837007] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.843866] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.850652] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.857472] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.864323] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.871142] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  615.922579] binder: 22631 RLIMIT_NICE not set
12:13:12 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0)

12:13:12 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00')
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)
r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0)

[  615.968693] binder: 22630:22635 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  615.980839] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  616.034423] hid-generic 0000:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1
12:13:12 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00')
mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000200)=""/116, 0x184)

12:13:12 executing program 5:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

12:13:12 executing program 4:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x800040000000015)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)

12:13:12 executing program 1:
r0 = memfd_create(&(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00')
sendfile(r0, r1, 0x0, 0x40000000009)

12:13:12 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
set_robust_list(&(0x7f0000000180), 0x18)

12:13:12 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x1, 0x1, 0x2})
get_robust_list(0x0, 0x0, &(0x7f00000005c0))
fcntl$setflags(r0, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
rmdir(&(0x7f0000000340)='./file0\x00')
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
flistxattr(r1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r3, r5, &(0x7f0000000180), 0x100000001)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

12:13:12 executing program 2:
socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r1, 0x0, 0x0)

12:13:12 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)

12:13:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:12 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1b})
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)

12:13:12 executing program 4:
r0 = getpgid(0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(r0, 0x0)

12:13:12 executing program 5:
r0 = socket(0x11, 0x4000000000080002, 0x0)
sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0xc}], 0xc}}], 0x1, 0x0)

[  616.919701] binder: 22685 RLIMIT_NICE not set
12:13:13 executing program 4:
syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')

[  616.966704] binder: 22684:22694 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:13 executing program 5:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
splice(r0, &(0x7f0000000280), r1, 0x0, 0x3f, 0x0)

12:13:13 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x1, 0x1, 0x2})
get_robust_list(0x0, 0x0, &(0x7f00000005c0))
fcntl$setflags(r0, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
rmdir(&(0x7f0000000340)='./file0\x00')
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
flistxattr(r1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r3, r5, &(0x7f0000000180), 0x100000001)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

12:13:13 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syslog(0x9, 0x0, 0x0)

12:13:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$void(r0, 0xc0045878)

12:13:13 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x3, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="829412a9000000000000941c3b5d04fb0000"], 0x1, 0x800)
msgsnd(r0, &(0x7f0000000080)={0x3, "aa556a909e588eec8a6cda9cab1cc3c679076aa7759d1fe8f8f77c140e5b3c1f5f2f4c819f4fa9e70377af8d2548b8e5a75406f81902a2d76a491451bf89003d01a99b817f0e62023e99932a46ae169e14f19f8bb7c9410070adfd205d9859a2ebd38ed2a4863502d214a535d80e061aaed8a68b453746416f3f242f1829eac150683c08c3b71be3ec883a5275bd59602caefdf6257107ec2c7d8d20296ead7f0a2532d859d3203344792660ac9e40b2c043089ed1824d0bc7faabccb484e0308b7ab1243fbe650995afa81f12a9d4bfd6353478d353bcf13a02cd"}, 0xe3, 0x800)
getgid()

12:13:13 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)

12:13:13 executing program 4:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$clear(0x7, r0)

12:13:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:13 executing program 5:
bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
creat(0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x802, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)

12:13:13 executing program 2:
r0 = getpgid(0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(r0, 0x0)

[  617.914562] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.921477] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.928435] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.935295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.942184] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.948979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.955839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
12:13:14 executing program 4:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)='g', 0x1}], 0x1)

[  617.962706] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.969521] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.976468] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  617.977633] binder: 22744:22746 ioctl c0306201 0 returned -14
[  617.983354] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  618.009229] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.016243] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.023169] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.030031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.036968] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.043821] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.050662] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.057575] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.064472] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.071298] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.078170] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  618.129532] binder: 22752 RLIMIT_NICE not set
12:13:14 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x1, 0x1, 0x2})
get_robust_list(0x0, 0x0, &(0x7f00000005c0))
fcntl$setflags(r0, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
rmdir(&(0x7f0000000340)='./file0\x00')
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
flistxattr(r1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r3, r5, &(0x7f0000000180), 0x100000001)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[  618.179220] binder: 22744:22746 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:14 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz'}, 0x0, 0xfffffffffffffffb)

12:13:14 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240))

[  618.262401] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  618.274889] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz1
12:13:14 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0)
write(r1, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c2", 0x10)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140))

12:13:14 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/206, 0xce}], 0x1)

12:13:14 executing program 3:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_MCE_KILL_GET(0x22)

12:13:14 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00')
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000200)=""/116, 0x184)

12:13:14 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2, 0x0)
pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000100)="d3", 0x1}, {0x0}, {0x0}, {0x0}], 0x4, 0x0)

12:13:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0})

12:13:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffff0a, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
read(r0, &(0x7f0000000380)=""/98, 0xfffffffffffffd5e)
r1 = dup2(r0, r0)
write$apparmor_exec(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
shutdown(r0, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)

12:13:15 executing program 2:
io_setup(0x77b1, &(0x7f0000000000))

12:13:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000500))
syz_open_pts(r0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000480), 0x80, 0x0, 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/204, 0xcc}, {&(0x7f0000002e80)=""/235, 0xeb}], 0x2, 0x0, 0x0, 0xd1ae}, 0x4}, {{0x0, 0x0, 0x0}}], 0x3, 0x12000, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
pipe2(0x0, 0x0)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000640)='threaded\x00', 0x9)
write(r4, &(0x7f0000000340), 0x10000014c)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00')
socket$inet(0x10, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x2, "edb435aa6c503046"})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000005c0)=[@mss={0x2, 0x30035917}, @timestamp], 0x2)
getsockname$inet6(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000340))
clock_gettime(0x0, &(0x7f0000000240))
fcntl$getown(r0, 0x9)
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  619.061821] binder: 22797:22798 ioctl c0306201 0 returned -14
[  619.165833] binder: 22797:22804 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:13:15 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x1, 0x1, 0x2})
get_robust_list(0x0, 0x0, &(0x7f00000005c0))
fcntl$setflags(r0, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
rmdir(&(0x7f0000000340)='./file0\x00')
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
flistxattr(r1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
sendfile(r3, r5, &(0x7f0000000180), 0x100000001)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

12:13:15 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)

12:13:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffff0a, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
read(r0, &(0x7f0000000380)=""/98, 0xfffffffffffffd5e)
r1 = dup2(r0, r0)
write$apparmor_exec(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1)
fchdir(0xffffffffffffffff)
shutdown(r0, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)

12:13:15 executing program 2:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="c1fe000004000000603a1fe4ac141413e0", 0x11}], 0x1}, 0x0)

[  619.387449] ==================================================================
[  619.394886] BUG: KMSAN: uninit-value in __neigh_create+0x2249/0x2680
[  619.401416] CPU: 0 PID: 22820 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #15
[  619.408703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  619.418097] Call Trace:
[  619.420726]  dump_stack+0x173/0x1d0
[  619.424400]  kmsan_report+0x12e/0x2a0
[  619.428240]  __msan_warning+0x82/0xf0
[  619.432087]  __neigh_create+0x2249/0x2680
[  619.436274]  ? is_logbuf_locked+0x14/0x50
[  619.440456]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  619.445849]  ? __msan_poison_alloca+0x1f0/0x2a0
[  619.450568]  ip_finish_output2+0xa0f/0x1830
[  619.454940]  ip_finish_output+0xd2d/0xfd0
[  619.459146]  ip_output+0x53f/0x610
[  619.462726]  ? ip_mc_finish_output+0x3b0/0x3b0
[  619.467337]  ? ip_finish_output+0xfd0/0xfd0
[  619.471725]  ip_local_out+0x164/0x1d0
[  619.475564]  iptunnel_xmit+0x8d1/0xe00
[  619.479533]  ip_tunnel_xmit+0x37c6/0x3b90
[  619.483773]  ipgre_xmit+0xdd8/0xec0
[  619.487452]  ? ipgre_close+0x230/0x230
[  619.491379]  dev_hard_start_xmit+0x607/0xc40
[  619.495896]  __dev_queue_xmit+0x2e42/0x3bc0
[  619.500305]  dev_queue_xmit+0x4b/0x60
[  619.504135]  ? __netdev_pick_tx+0x1270/0x1270
[  619.508650]  packet_sendmsg+0x8306/0x8f30
[  619.512832]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[  619.518293]  ? rw_copy_check_uvector+0x149/0x6a0
[  619.523113]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  619.528585]  ___sys_sendmsg+0xdb9/0x11b0
[  619.532695]  ? compat_packet_setsockopt+0x360/0x360
[  619.537760]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  619.543178]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  619.548565]  ? __fget_light+0x6e1/0x750
[  619.552601]  __se_sys_sendmsg+0x305/0x460
[  619.556808]  __x64_sys_sendmsg+0x4a/0x70
[  619.560918]  do_syscall_64+0xbc/0xf0
[  619.564660]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  619.569870] RIP: 0033:0x4579b9
[  619.573078] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  619.592004] RSP: 002b:00007f03acde6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  619.599729] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9
[  619.607023] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  619.614307] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  619.621590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03acde76d4
[  619.628881] R13: 00000000004c4d3b R14: 00000000004d84a8 R15: 00000000ffffffff
[  619.636181] 
[  619.637815] Uninit was created at:
[  619.641361] No stack
[  619.643690] ==================================================================
[  619.651051] Disabling lock debugging due to kernel taint
[  619.656513] Kernel panic - not syncing: panic_on_warn set ...
[  619.662415] CPU: 0 PID: 22820 Comm: syz-executor2 Tainted: G    B             4.20.0-rc7+ #15
[  619.671083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  619.680449] Call Trace:
[  619.683079]  dump_stack+0x173/0x1d0
[  619.686772]  panic+0x3ce/0x961
[  619.690043]  kmsan_report+0x293/0x2a0
[  619.693890]  __msan_warning+0x82/0xf0
[  619.697723]  __neigh_create+0x2249/0x2680
[  619.701903]  ? is_logbuf_locked+0x14/0x50
[  619.706117]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  619.711555]  ? __msan_poison_alloca+0x1f0/0x2a0
[  619.716303]  ip_finish_output2+0xa0f/0x1830
[  619.720679]  ip_finish_output+0xd2d/0xfd0
[  619.724869]  ip_output+0x53f/0x610
[  619.728452]  ? ip_mc_finish_output+0x3b0/0x3b0
[  619.733064]  ? ip_finish_output+0xfd0/0xfd0
[  619.737417]  ip_local_out+0x164/0x1d0
[  619.741254]  iptunnel_xmit+0x8d1/0xe00
[  619.745211]  ip_tunnel_xmit+0x37c6/0x3b90
[  619.749448]  ipgre_xmit+0xdd8/0xec0
[  619.753128]  ? ipgre_close+0x230/0x230
[  619.757039]  dev_hard_start_xmit+0x607/0xc40
[  619.761507]  __dev_queue_xmit+0x2e42/0x3bc0
[  619.765894]  dev_queue_xmit+0x4b/0x60
[  619.769711]  ? __netdev_pick_tx+0x1270/0x1270
[  619.774242]  packet_sendmsg+0x8306/0x8f30
[  619.778438]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[  619.783904]  ? rw_copy_check_uvector+0x149/0x6a0
[  619.788699]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  619.794158]  ___sys_sendmsg+0xdb9/0x11b0
[  619.798258]  ? compat_packet_setsockopt+0x360/0x360
[  619.803307]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  619.808706]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  619.814081]  ? __fget_light+0x6e1/0x750
[  619.818129]  __se_sys_sendmsg+0x305/0x460
[  619.822377]  __x64_sys_sendmsg+0x4a/0x70
[  619.826466]  do_syscall_64+0xbc/0xf0
[  619.830204]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  619.835402] RIP: 0033:0x4579b9
[  619.838622] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  619.857775] RSP: 002b:00007f03acde6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  619.865499] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9
[  619.872865] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  619.880151] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  619.887431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03acde76d4
[  619.894713] R13: 00000000004c4d3b R14: 00000000004d84a8 R15: 00000000ffffffff
[  619.903076] Kernel Offset: disabled
[  619.906716] Rebooting in 86400 seconds..