364.647737] ? __fget+0x237/0x370 [ 364.651190] ? security_file_ioctl+0x89/0xb0 [ 364.655689] SyS_ioctl+0x8f/0xc0 [ 364.659053] ? do_vfs_ioctl+0x1060/0x1060 [ 364.663193] do_syscall_64+0x1e8/0x640 [ 364.667164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.672096] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 364.677283] RIP: 0033:0x459a09 [ 364.680463] RSP: 002b:00007f0d55cb5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.688170] RAX: ffffffffffffffda RBX: 00007f0d55cb5c90 RCX: 0000000000459a09 [ 364.695524] RDX: 0000000020000300 RSI: 00000000400454ca RDI: 0000000000000003 [ 364.702784] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:22:22 executing program 1 (fault-call:1 fault-nth:28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) [ 364.710053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d55cb66d4 [ 364.717322] R13: 00000000004c4556 R14: 00000000004d89c0 R15: 0000000000000004 00:22:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='\x06~\xad\xc4\xc5\b\x00\x00/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/\\mmidi#\x00', 0x401, 0x80001) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x1e1c, 0x9, 0x8000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x7ff, 0x450300) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0)=0x5488, 0x4) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 364.866304] FAULT_INJECTION: forcing a failure. [ 364.866304] name failslab, interval 1, probability 0, space 0, times 0 [ 364.892134] CPU: 0 PID: 20916 Comm: syz-executor.1 Not tainted 4.14.145 #0 [ 364.899326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.908864] Call Trace: [ 364.911461] dump_stack+0x138/0x197 [ 364.915107] should_fail.cold+0x10f/0x159 [ 364.919251] should_failslab+0xdb/0x130 [ 364.923246] kmem_cache_alloc+0x2d7/0x780 [ 364.928809] ? wait_for_completion+0x420/0x420 [ 364.933491] __kernfs_new_node+0x70/0x420 [ 364.937631] kernfs_new_node+0x80/0xf0 [ 364.941516] __kernfs_create_file+0x46/0x323 [ 364.945925] sysfs_add_file_mode_ns+0x1e4/0x450 [ 364.950609] internal_create_group+0x232/0x7b0 [ 364.955185] sysfs_create_groups+0x97/0x140 [ 364.959505] device_add+0x7d8/0x1490 [ 364.963336] ? device_private_init+0x190/0x190 [ 364.967913] netdev_register_kobject+0x183/0x3a0 [ 364.972661] register_netdevice+0x814/0xca0 [ 364.976993] ? netdev_change_features+0x80/0x80 [ 364.982088] __tun_chr_ioctl+0x2179/0x3510 [ 364.986330] ? tun_chr_read_iter+0x1e0/0x1e0 [ 364.990733] tun_chr_ioctl+0x2b/0x40 [ 364.994529] ? tun_chr_compat_ioctl+0x30/0x30 [ 364.999028] do_vfs_ioctl+0x7ae/0x1060 [ 365.002909] ? selinux_file_mprotect+0x5d0/0x5d0 [ 365.007658] ? lock_downgrade+0x6e0/0x6e0 [ 365.011817] ? ioctl_preallocate+0x1c0/0x1c0 [ 365.016219] ? __fget+0x237/0x370 [ 365.019677] ? security_file_ioctl+0x89/0xb0 [ 365.024083] SyS_ioctl+0x8f/0xc0 [ 365.027439] ? do_vfs_ioctl+0x1060/0x1060 [ 365.031601] do_syscall_64+0x1e8/0x640 [ 365.035515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.040351] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 365.045535] RIP: 0033:0x459a09 [ 365.048726] RSP: 002b:00007f0d55cb5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.056424] RAX: ffffffffffffffda RBX: 00007f0d55cb5c90 RCX: 0000000000459a09 00:22:22 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x3, 0x3ff, 0x0, 0x10001}}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000140)={0x1, 0xb21, 0x3785, 0x0, 0x0, 0x101}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x4}, 0x10}, 0x70) [ 365.063796] RDX: 0000000020000300 RSI: 00000000400454ca RDI: 0000000000000003 [ 365.071061] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.078362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d55cb66d4 [ 365.085619] R13: 00000000004c4556 R14: 00000000004d89c0 R15: 0000000000000004 00:22:22 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0xff54, &(0x7f00000000c0)}, 0x5f7c2825daa3a4ba) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00') mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000008) sendmsg$kcm(r5, &(0x7f00000007c0)={&(0x7f0000000340)=@un=@file={0x0, './file0/file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)="b37f6ba24a5ff07459c587a1f9ff89e9c2f2a7ccb8b109b0865cffcee76221b48dee2d587142638a5b19b2e5f12180e1b62375dda778c43e613d87ecc8c2267ec7e84133a61c940af9c49b5b7189d4a35a8dc97967628df4fcde30864251c5d9af08a4319341fd81176a698eccfcc479743aa1e914828a0f0ea8c81129e03ef5a3c2b406ec3a8cfe0ee9cbab6343183e31577d68b3b7955fedbca9e8ec8a2e17a18608b4b8396d", 0xa7}, {&(0x7f00000000c0)="d5175d5d21c85f1a643994afc72f27cfa3", 0x11}, {&(0x7f0000000200)="94c5f8e810f8a92fedccb32d8e9595b89bda6970e2b3dd919da08db5faa1015be41bb94de8c251c4be92d9faff1a9e8ac5335edd965b874e202fa25273", 0x3d}, {&(0x7f00000004c0)="32c8afe654f72ad10e252b2a71145bb22f884355dd1e3b37106f7ac15a163ad68ef9eb52ca578951df930cb46732e9fb1e93b644043de4a4d7d0c364bf434144ab62163d53a76065a4b637014b3f4176086d03d76342f611aa71e2822d081341124bc0a87251b12955822f98e6fda98506b69beebd70ce4f1f728834c7128fc3a46731f82395c5252989c774c32dce74c2b3289eaf75a164cc13e269203f53f3e45331209d9b716918d0b1268728c398737c0e2907e2adab13299f2db890a22449f0ddbfa242896479e1c386e34ac01ae69f23878d59a52596305b28a650c0826ff9f4c99230450b26b5700ad097f2", 0xef}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000680)="34f76646d6151cf0658b17fbeb0b0741b429f91e578aad1fd6e7841150fb338839e069e2d49c2fc83a6f6d27acef6b2fd8d469de99b77aec0ebd1e835da5fdfe2d35364739e97fd0b8c18263ab3ea20634cea40bff19c311d284d24b683f9470055a0fbd172758e7e03ca1536247a5ca8941ea410a1d64138fd39f605ffe1c47a7be66cb", 0x84}, {&(0x7f0000000280)="063dfba5d4b152290cb3e27999e3d74e5e9d628294f2c6a3b3b80702ed9f558eeff65f6886aecc8bfc89567bb98d36595e30686a2d8faaaea7b71748", 0x3c}], 0x7, &(0x7f0000000740)=[{0x68, 0x114, 0xffffffffffffffad, "c537bc554fe06449164a8f9e8bdf5ce90d9584b2043b873ce6472e037728cd86711d690f9c3ea24e893e234c8963a9263d70defd3973344254d6b2fc619af45eff4f104bd2d29447770bed1be528f5a562ce154836c9f8"}], 0x68}, 0x8000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e745c01e69dfc8a80000001100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x1, 0xe9cd, 0x7fffffff, 0x2, r1, 0x10, [], r6, 0xffffffffffffffff, 0x3, 0x2}, 0x3c) recvmsg$kcm(r0, 0x0, 0x0) 00:22:22 executing program 1 (fault-call:1 fault-nth:29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2000000000000086, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 00:22:22 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000017c0)={r4, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x4}, 0x8) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000280)=0x200) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="006d656d6f7282206d53ba8f4e0541a4fa7d83efd878ea6ede58cca53dedd7628b7a0d464481b9c5221bcb37ac3e5d267a81fd5886a05f69868fd984738ae354c70e22bd748427ac2a9876dc2f141cfc78594b45fbccf10881d75ff019ecb647cedacccbbbbcc6dd54bd2dc76d8c766933047adad5ef56e1110490abe07f98c9ff6c25730cf1cc1d4c733660e9d009099c6714b615c69e53a9292d70730a26210c72a9"], 0x8) 00:22:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) [ 365.343575] FAULT_INJECTION: forcing a failure. [ 365.343575] name failslab, interval 1, probability 0, space 0, times 0 00:22:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x608, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x4a723358, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x100) [ 365.423915] CPU: 1 PID: 20940 Comm: syz-executor.1 Not tainted 4.14.145 #0 [ 365.431079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.440620] Call Trace: [ 365.443318] dump_stack+0x138/0x197 [ 365.446970] should_fail.cold+0x10f/0x159 [ 365.451163] should_failslab+0xdb/0x130 [ 365.455156] kmem_cache_alloc+0x2d7/0x780 [ 365.459325] ? wait_for_completion+0x420/0x420 [ 365.464059] __kernfs_new_node+0x70/0x420 [ 365.469541] kernfs_new_node+0x80/0xf0 [ 365.473475] __kernfs_create_file+0x46/0x323 [ 365.477904] sysfs_add_file_mode_ns+0x1e4/0x450 [ 365.482766] internal_create_group+0x232/0x7b0 [ 365.487468] sysfs_create_groups+0x97/0x140 [ 365.491807] device_add+0x7d8/0x1490 [ 365.495629] ? device_private_init+0x190/0x190 [ 365.500234] netdev_register_kobject+0x183/0x3a0 [ 365.505100] register_netdevice+0x814/0xca0 [ 365.509519] ? netdev_change_features+0x80/0x80 [ 365.514189] __tun_chr_ioctl+0x2179/0x3510 [ 365.518464] ? tun_chr_read_iter+0x1e0/0x1e0 [ 365.522899] tun_chr_ioctl+0x2b/0x40 [ 365.526640] ? tun_chr_compat_ioctl+0x30/0x30 [ 365.531150] do_vfs_ioctl+0x7ae/0x1060 [ 365.535043] ? selinux_file_mprotect+0x5d0/0x5d0 [ 365.539875] ? lock_downgrade+0x6e0/0x6e0 [ 365.544810] ? ioctl_preallocate+0x1c0/0x1c0 [ 365.549222] ? __fget+0x237/0x370 [ 365.552671] ? security_file_ioctl+0x89/0xb0 [ 365.557095] SyS_ioctl+0x8f/0xc0 [ 365.560463] ? do_vfs_ioctl+0x1060/0x1060 [ 365.564693] do_syscall_64+0x1e8/0x640 [ 365.568656] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.573685] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 365.578885] RIP: 0033:0x459a09 [ 365.582080] RSP: 002b:00007f0d55cb5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.589819] RAX: ffffffffffffffda RBX: 00007f0d55cb5c90 RCX: 0000000000459a09 [ 365.597085] RDX: 0000000020000300 RSI: 00000000400454ca RDI: 0000000000000003 [ 365.604346] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.611605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d55cb66d4 [ 365.618860] R13: 00000000004c4556 R14: 00000000004d89c0 R15: 0000000000000004 00:22:23 executing program 1 (fault-call:1 fault-nth:30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) [ 365.715038] device nr0 entered promiscuous mode [ 365.744640] FAULT_INJECTION: forcing a failure. [ 365.744640] name failslab, interval 1, probability 0, space 0, times 0 [ 365.756942] CPU: 0 PID: 20967 Comm: syz-executor.1 Not tainted 4.14.145 #0 [ 365.763986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.773353] Call Trace: [ 365.775976] dump_stack+0x138/0x197 [ 365.779625] should_fail.cold+0x10f/0x159 [ 365.783801] should_failslab+0xdb/0x130 [ 365.787883] kmem_cache_alloc+0x2d7/0x780 [ 365.792042] ? wait_for_completion+0x420/0x420 [ 365.796645] __kernfs_new_node+0x70/0x420 [ 365.800816] kernfs_new_node+0x80/0xf0 [ 365.804809] __kernfs_create_file+0x46/0x323 [ 365.809240] sysfs_add_file_mode_ns+0x1e4/0x450 [ 365.814088] internal_create_group+0x232/0x7b0 [ 365.818693] sysfs_create_groups+0x97/0x140 [ 365.823162] device_add+0x7d8/0x1490 [ 365.826903] ? device_private_init+0x190/0x190 [ 365.831720] netdev_register_kobject+0x183/0x3a0 [ 365.836493] register_netdevice+0x814/0xca0 [ 365.840826] ? netdev_change_features+0x80/0x80 [ 365.845514] __tun_chr_ioctl+0x2179/0x3510 [ 365.849766] ? tun_chr_read_iter+0x1e0/0x1e0 [ 365.854195] tun_chr_ioctl+0x2b/0x40 [ 365.857924] ? tun_chr_compat_ioctl+0x30/0x30 [ 365.862430] do_vfs_ioctl+0x7ae/0x1060 [ 365.866327] ? selinux_file_mprotect+0x5d0/0x5d0 [ 365.871314] ? lock_downgrade+0x6e0/0x6e0 [ 365.875572] ? ioctl_preallocate+0x1c0/0x1c0 [ 365.880081] ? __fget+0x237/0x370 [ 365.883547] ? security_file_ioctl+0x89/0xb0 [ 365.887964] SyS_ioctl+0x8f/0xc0 [ 365.891330] ? do_vfs_ioctl+0x1060/0x1060 [ 365.895468] do_syscall_64+0x1e8/0x640 [ 365.899342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.904181] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 365.909367] RIP: 0033:0x459a09 [ 365.912541] RSP: 002b:00007f0d55cb5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.920367] RAX: ffffffffffffffda RBX: 00007f0d55cb5c90 RCX: 0000000000459a09 [ 365.927625] RDX: 0000000020000300 RSI: 00000000400454ca RDI: 0000000000000003 [ 365.935003] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:22:23 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:23 executing program 1 (fault-call:1 fault-nth:31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) [ 365.942288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d55cb66d4 [ 365.949552] R13: 00000000004c4556 R14: 00000000004d89c0 R15: 0000000000000004 00:22:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a2f6bbf42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8400, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x1, 0xa, 0x4, 0x8, {0x0, 0x7530}, {0xb8553f7326225203, 0x2, 0xfffffffffffffffa, 0x2, 0xf24e, 0x0, "1e66789c"}, 0x1ad, 0x4, @userptr=0x54, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 00:22:23 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) ioctl$int_in(r0, 0x1c692a195e595c6d, &(0x7f0000000000)=0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) [ 366.057584] audit: type=1400 audit(1568938943.772:66): avc: denied { create } for pid=20969 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 00:22:23 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x2c) renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) [ 366.255668] device nr0 entered promiscuous mode 00:22:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:24 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x0, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 366.385314] device nr0 entered promiscuous mode [ 366.452251] device nr0 entered promiscuous mode 00:22:24 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000280)=0x2) setreuid(0x0, r2) setresuid(r2, 0xffffffffffffffff, 0x0) r3 = getuid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) setresuid(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) setresuid(r7, 0xffffffffffffffff, 0x0) setreuid(r3, r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f00000000c0)='./file0\x00') mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x20000008) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @multicast2}, &(0x7f0000000340)=0xc) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, [], 0x27}, 0x4e24, 0x0, 0x4e24, 0x100, 0xa, 0xa0, 0xd134cbb9a82e82f0, 0x32, r10, r2}, {0x8000, 0x1, 0x32d, 0x8b, 0x80000000, 0x7, 0x6413f23c, 0x8}, {0xebf7, 0x800, 0x2000000004, 0x80}, 0xffffffffffffece3, 0x6e6bb2, 0x5, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0xa8}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x3, 0x2, 0x9, 0xc859, 0xfff, 0x200}}, 0xe8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r11) setresuid(r11, 0xffffffffffffffff, 0x0) geteuid() r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r12, &(0x7f0000000180)='./file0/file0\x00') renameat2(r12, &(0x7f0000000100)='./file0/file0\x00', r12, &(0x7f0000000000)='./file0\x00', 0x0) r13 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r13, &(0x7f00000000c0)='./file0\x00') mkdirat(r13, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 00:22:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0xdd6bdfa58148982e}) [ 366.636440] device nr0 entered promiscuous mode [ 366.705711] device nr0 entered promiscuous mode 00:22:24 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80200, 0x0) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x1f, 0x4) 00:22:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge_slave_1\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:24 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x0, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'veth1_to_bond\x00', 0x100}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) sendmsg$rds(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f0000000340)=""/246, 0xf6}], 0x3, &(0x7f00000008c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/36, 0x24}, &(0x7f0000000440), 0x10}}, @fadd={0x58, 0x114, 0x6, {{0x1000000000000000, 0x7fff}, &(0x7f0000000480)=0x13aa, &(0x7f00000004c0), 0x3, 0x3, 0x7f, 0x100000000, 0x1, 0x326}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffffffffffffd, 0x5}, &(0x7f00000006c0)=0x1, &(0x7f0000000700)=0x1ff, 0x7, 0x6, 0x80010000000000, 0x6, 0x34efdde530389121, 0x1f}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000740)=""/155, 0x9b}, &(0x7f0000000800), 0x6d}}, @cswp={0x58, 0x114, 0x7, {{0x100, 0x9}, &(0x7f0000000840)=0x6, &(0x7f0000000880)=0x6, 0x8aea, 0x5, 0x9b40, 0x400, 0x10, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x5}}], 0x198, 0x20000000}, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0xfffffffffffffffe}, 0x10}, 0x70) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000380)=0xe8) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={@empty, @loopback, @remote, 0xe68, 0xb0, 0x3758, 0x400, 0xffffffffffffff81, 0x400001, r7}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x5, 0x7, 0x8b0, 0x0, r0, 0x40, [], r2, r3, 0x1, 0x4}, 0x3c) 00:22:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/d\x00\x00\x00\x00\x00\x00\x00\x00un\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) prctl$PR_SET_UNALIGN(0x6, 0xc521d5054f75c862) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10) write$FUSE_POLL(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x8, {0xffffffff}}, 0x18) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000180)) capget(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x7, 0x9, 0x3, 0x3, 0x9000000, 0x1}) [ 367.054498] device nr0 entered promiscuous mode 00:22:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x10) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000017c0)={r2, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 367.122885] device nr0 entered promiscuous mode 00:22:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8001, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$TUNSETLINK(r1, 0x400454cd, 0x201) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000280)={0x63e000000000000, 0x800, 0x800, 0xa, 0x1}) sysfs$1(0x1, &(0x7f00000002c0)='\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xfdef) [ 367.184761] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 00:22:25 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x0, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 367.268073] device nr0 entered promiscuous mode 00:22:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='\x02]Dx\xf9T\x96\xc6\xbf\xd0G\x99\x00', 0x206a00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syz_tun\x00', 0x200}) [ 367.334027] device nr0 entered promiscuous mode 00:22:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5e0000000000, 0x4000) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @empty}, &(0x7f0000000240)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000003040), 0x4000000000003c4, 0x0) r3 = dup2(r2, r1) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={@remote={[], 0x0}, 0x5, 'eql\x00'}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2605}) 00:22:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x22eb}, @val={0x1, 0x1, 0xcc, 0x2, 0x100000000, 0x6}, @ipx={0xffff, 0x5a, 0xfffffffffffff000, 0x4, {@broadcast, @current, 0x2}, {@broadcast, @broadcast, 0xbc}, "4f8d8fdb4d586f558e5ec50f07ea7fcab3b3fa15603e63566ced710f9b592c7674e764b6eec9461e99b257a74cd7d4b1882759b8d4dc02abe9758e75"}}, 0x68) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_mreq(r3, 0x0, 0x12, &(0x7f0000000180)={@broadcast, @multicast2}, 0x8) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20000008) write$P9_RRENAME(r4, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0x7) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="008386dd20"], 0xfdef) 00:22:25 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(0xffffffffffffffff, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:25 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bond_slave_0\x00', @local}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) [ 367.835785] device nr0 entered promiscuous mode 00:22:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000003040), 0x4000000000003c4, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') 00:22:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x1a8) 00:22:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 368.055962] device nr0 entered promiscuous mode 00:22:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(0xffffffffffffffff, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:25 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007dffb7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x20000, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='\"\x00nu\x8d/enf\xd1h\x00', 0x200000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000001600)=0x14) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{0x0, 0x53, &(0x7f0000000440)=[{&(0x7f0000000080)="d2d5e1dcc54cd141edf105e568978cb7854e5d06c88d6f9fc3acadbe4fec67568afb66796b29cd937eb624848291e88ce145f67a300d938638733362b14efa77dad6beec005778a1729abda4a4e2f68a4db673c56e3b5b896edeff54e227aee0c948f713b0867d80c6651d869d631a30dbc2aa5bb03affd2391682e2780afb7f69eddec410c66aa023c191769df812f5ebe0e317bffb73c5d4ccadfed96262e7207a34e7bfffad46a5eb94", 0xab}, {&(0x7f0000002840)="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", 0x153}, {&(0x7f0000000280)="241fb4de21264beb6c271f70b0d0d415e9ef7305ab8bb94cfac6f587de6a74d2fc22b5a7", 0x24}, {&(0x7f00000002c0)="a64c8b81a3d8d23738671b7792d68e1690a381f1dd1649137141b6048e6baf2c3f9b2e6ed59fa188230ed99bea7fa5e8deaa77c5d0a20aa620164560d63e10cc", 0x40}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000380)="179fde668526f299353335d3778c62709a866ca8c2bfdb0078753efbaa36ea630cafa9ebae88ae7427e254510b072e95b2bb5c19ac1aeb96f115ee0dbf74ade83e95b3c6327a356383972d3f273c006ec21c4d1a381b01d0d08ba2b46dbb2efd09d1b967b1af214404114781696f5f981e7af2313be10461d665545ef8ec1d829dff86dd0bd3964022aacfaba05928b35760cd3c", 0x94}], 0x6, &(0x7f0000001640)=[@rthdr={{0x28, 0x29, 0x39, {0x2e, 0x2, 0x0, 0xc8a1, 0x0, [@remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x51}}, @flowinfo={{0x14, 0x29, 0xb, 0x2a4}}, @hopopts={{0x1110, 0x29, 0x36, {0x3a, 0x21e, [], [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x10, {0x7, 0x2, 0x80, 0x6, [0x3]}}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x10000}, @generic={0x897, 0x1000, "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"}, @generic={0x4, 0xbc, "403d9f5bd3379b7858682b5daca38ee4c7b02d1fd4c1e438e1ad23d441fa2ecff5fe89a2f6e1c11203b398119324b1cb6f9900540f867bd0a56127c53c41348f117a828715d5ad340a3ac825afb5c04585bd4bc4e2e9eeb07c581394d8813f1cb0c3272259551b6a131d2f34b67cda600dd25fbef64bff52f081c8f988358fbb99f39964f576a6a0e8eef3be9743bbfbe61a54afae6bf6eab633640cbc271f4da8be5b75ad142264d0278cdee05da907e9ccce35fcce699ab901b2bb"}, @enc_lim={0x4, 0x1, 0x401}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x11a8}}], 0x1, 0x40000) 00:22:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(0xffffffffffffffff, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:26 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:26 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa0cf1d490c8ebd47}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="07370904d75c2cb4dfb7e0ee876e854d18062d33ddd7adc120ac072bf0e34416c4f95ca5839e351c03b6fa7c98a71999392e45349a9a10204f6431f808d2302e3466", 0x42, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000200)='\x00', &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x100) recvmsg$kcm(r0, 0x0, 0x0) [ 368.885856] device nr0 entered promiscuous mode 00:22:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x100000000000000}, 0x10}, 0x70) 00:22:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0xa0) 00:22:26 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x200202) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000001c0)=0xc965, 0x4) renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x101000, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000740)=[{{r3, r4/1000+10000}, 0x1, 0x3, 0x73f}, {{0x77359400}, 0x16, 0x3}, {{0x0, 0x7530}, 0x17, 0x6, 0x81}, {{r5, r6/1000+30000}, 0x4, 0x400, 0xef}, {{0x0, 0x7530}, 0x1a, 0x3, 0x1}, {{0x77359400}, 0x4, 0xffff}], 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x8, 0x2}, 0x0, 0x0, &(0x7f0000000440)={0x1, 0x5, 0x8, 0x8}, &(0x7f0000000280)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x8a22}}, 0x10) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1ff, 0x0, 0x1}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0x1, 0x3, 0x9, 0x0, 0x3, 0x6}) [ 369.034656] device nr0 entered promiscuous mode 00:22:26 executing program 1: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x7530}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 369.111777] device nr0 entered promiscuous mode 00:22:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006386dd207110880937754aa1ae999a8e146d3500618d2ad06fdafbe994edbed50bc2d2a0baa726e58193399681ae4be316af1bfa144dc7d6988f339b5aa87663782dd6c405a447e98ffdaf8a1abc2e59f1699d5447cf8421097bb9fa773f6a6fbe643b0ac825789ca9300873f0365f5ff3625e9978e8e0cb3c"], 0xfdef) 00:22:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="8dcd16b47c6320ad4ed2bd3ebedac6a0ccedcd449e91cdba3e9a53fe2ead761802dda1951dafa06215fbc48989bb0ce9b5ab7db9589b1c84e477f3fe6649b48c66da1fbecb48ec7058396f2f30af84169225f99c4a6f", 0x56}, {&(0x7f00000000c0)="36229f89526f32fac19838a2d9d4e757352b7f349be54ecd89c9e5d59dedc4c4b7fc0da9865538241b7de5570008079c682193e2b17d4c436483eb469a3082491e260c5635f45a58ccb18b7553e45d347545d491642bc335e899eeb3e800d45f63676b27c4a2a4a85970f1966be2696638952110e19a37c546ce10866760ab5b2f4ddf9a1608f6561fd045ad59bf4d9da88059083a3a506eb06d2d4948bb3b31bedada693ffb2d54bbfd9d4c21b65d934ca74d86f8eb6c0e026ea92565d7c5ea24630dba09c41a4d85c13ab1f72610ed8b3623", 0xd3}], 0x2) [ 369.263487] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 369.287630] device nr0 entered promiscuous mode [ 369.336426] device nr0 entered promiscuous mode 00:22:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x4000}) 00:22:27 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nlmo\x7f\x00', 0x1520}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fffffff, 0x200) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0x458c) 00:22:27 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:27 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x34, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x28}, @rand_addr="977df6e1e01b19a886c206290af2ea43", @loopback, 0x1000, 0x7f, 0x1000000000000, 0x0, 0x2, 0x40010000, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='sf3\x00', 0x608401, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000040)=""/36) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="006b86dd206a9a5085c9333d8a883aaf1a2fa19640f771a95d093bf5b0a2aa5ecf31a2d1b517f63a2b89ddb3c0ed25ac2ae305ab52f03c160487bb0508851039fc6c5608f1d604b9e447e910daada2a4b4142306d391a27b4477a43f5e407b61d29a8d5d8ae1fc0d"], 0xfdef) [ 369.676220] device nr0 entered promiscuous mode 00:22:27 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x8, @mcast2, 0x1}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000140)="320472d19e59e48e94cde207410a211ab21b5fefb50842d6879976f018cd9413e185e7f49ad36540bffdbc19cc416b1e8beb2c002505f16c821927e67956de4799065ea474bc3f140d528635d1fd89399276099fee81dc8656dd54d38cac095213004e0c4426a0530ad4bffd21a3c21ad455e7ba15dcf637ff80df87f93ce6facb3b96f59f5102c742d1d18c847aadad3eefd4526035666c2821c3d3c5a45b729dcc520721f82889e0c33142f7b78cf2dc2bec5e41283cfc30d1ad19210e764e334c3ec0a2c2bd56e0e9083055bf72f560faa45f39547be146e59f27d157b8ccc399391d24406215877786816a231618", 0xf0}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000040)="d952bc95b0990a9d54c09275ff5bfaaf43261865f403dfd505da77aa272383cf8baa99f268298324acdbb27b6af5ed6a2f0f81a0b33cc0c7bf627dfad77a1465d14ca866dcaabb8faafefaac5e088e64763012d7f7c971f269c05e205a10c8ca3137ed7a7ac0fb8275bdd1fc45", 0x6d}, {&(0x7f0000001340)="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", 0xfe}, {&(0x7f00000000c0)="cbcaef0b7303c8b0", 0x8}, {&(0x7f0000000240)="4c719b9c44578f47c05f6abd0be897036b1ecdf9cd1a4697332075cfb3b232969f581456502149f0b9fcb58ade4632a20003e29efeacf85445fb0bff43500ffd870765bcad959afc171c9269761bd16223cc6f39b8a62686fd0d", 0x5a}], 0x6, 0x0, 0x0, 0x800}, 0x4000001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) [ 369.747033] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 369.795190] device nr0 entered promiscuous mode 00:22:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xa1, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x3}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="87acbe06a98563c0ce94c79117006386dd20"], 0xfdef) 00:22:27 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 369.958331] device nr0 entered promiscuous mode [ 370.034707] device nr0 entered promiscuous mode 00:22:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xfdef) 00:22:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) [ 370.217933] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 370.262582] device nr0 entered promiscuous mode [ 370.339205] device nr0 entered promiscuous mode 00:22:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:28 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0xff, 0xfa}, &(0x7f0000000140)=0x90) 00:22:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) fcntl$getown(r2, 0x9) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:28 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000040)={0x8, 0x1}) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x22000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) [ 370.549813] device nr0 entered promiscuous mode 00:22:28 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000000440)='hfs\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0x8, &(0x7f0000000b00)=[{&(0x7f0000000600)="cdb3e98018ba746ae3199ba60956e4cf1976d8559b4e3335373a7d01f20068739b2bb457321a12", 0x27, 0x5}, {&(0x7f0000000640)="6f79db5596199738b9f2786853626910a4c057b2722dbcc058fe1f9eb903afbc6c48b82d76158aef67856e039a96533f35bb154ae5baaece916e7dedbd6240c47c51d6e6c22c506e8fec557b7ad3670063a1d3e2a9689356c90ae1546a29769a9be34dfdac105f92abb87bfb81f3c454e0e8b401255236d4c0864d8eb163deec0d86672b542fae07699591e55ca7786015ac13f7e9085b1b8987173850538f16af96514cb7afb1503d796dd6d425ab54697b41569a91ee50cf1cd029ba5a383190a604bfc0c632697faebd1807c9bad819a117a3d1bdf1beb4835df7fd332be4e16ad4996ae00dedaa8f", 0xea, 0x3507}, {&(0x7f0000000740)="69360c97ea5239a865cdacd28c0af6ad455d4f88cd05e979911ef9b7f90d9ea7e04ef5297a05e1f67d55e153c69f58c221679e52b33a65ababd1d697b515651b5f4116d21c8eaa12f0d284fd6b26fc6b", 0x50, 0x6}, {&(0x7f00000007c0)="85ce67a4681475bf952c272b116aa8a3125b874c2b38eeb439af9d9ecd3ca48525525d2653b2f312f1136f94535e2d8a92012c3657a0b277eb38805277f375a082b59070ccde7e6c1aa46f97f91f1fc836895734b76aa3d443f9043d2c0a7c32e7dcc3ef36c6720c7fc77beec84fcab0fd6e7632bdb00464472088911ecac07923327b1c75abd7a3644cf9bcb898d1ac1e438d482842e2fedc5a8daeb842ca11f82f1b4a429719d6d11832da93f7a2a373459b1a44201fee3f705de3bb940b18348f1020443d35cadcac0a6fd08466c35b8ce5836b6f67b4cf", 0xd9, 0xfb}, {&(0x7f00000008c0)="356b08217a88d8dbdcdb0836cdd60cb502b5a5b02cedbbb6ad754c09570cac04f13bf79897db53", 0x27, 0x6}, {&(0x7f0000000900)="32acb9d61d43690cd92d64e11d89d3fb067b6b2c0d82ea60e2f670f59decda5d88d40fca6e0cdf6a287b02d719c161c821e54062f16ceb9831990711c1f4e03302c27a0cc1a2c441996a12ff844e9a9a9c9d89bad58b4d4d3dd750ce470e5ee65b5d775fd383c31e1dde5a27a7444a4ca3c1c2561a71b12ab67df549186b5871dd011e89a2ddd62bd3135462524a7e2e5396a3a3f53c39cc0637751635d07b1b658846cbe094e3d0858369705301ce76c81e9a04968577b97f2dc12c008cbec5726dc0a0c749fcf6910f158a1d8e9c6e8c1565ff2482133972", 0xd9}, {&(0x7f0000000a00)="2e2b0b16d5ddbae469e6c8866a3a08fcdfa1f04f3746b97d57f1c3455f9e42ff7279b1c4c7028e4520", 0x29}, {&(0x7f0000000a40)="6b50a671cf2be111ed28228d5b226bc9795b5dbff3acdaac824994c2a9d752860859aaa77f8372fbc96992d4f3a86c73b9f3693ecd1868562efb398b453ace66026966e22137625a6dc09623692cf2acf624eab4f3c34086fdda751d0aeb938339b883cb11c696b4318c73ae85d5cfdd4dd0f819f7cce99d6337d06d3c8e0bda276d72eb67214af1cf43ab4e827213b4b7abca5b0e99117dc50a74a220b20262f82977", 0xa3}], 0x11000c4, &(0x7f0000000bc0)={[{@file_umask={'file_umask', 0x3d, 0x3}}], [{@obj_role={'obj_role', 0x3d, '(#mime_typeproc'}}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_lt={'fowner<'}}]}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000400)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40050000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8b386ecc9b5a1965}, 0x8000) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f00000003c0), &(0x7f0000000080)=0x4) [ 370.635658] device nr0 entered promiscuous mode 00:22:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) msgget(0x0, 0xc7d6ca177abb2b97) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:28 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0xa083) recvfrom$rxrpc(r0, &(0x7f0000000080)=""/177, 0xb1, 0x220, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) [ 370.846656] device nr0 entered promiscuous mode 00:22:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x0, 0x40004, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:28 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 370.946243] device nr0 entered promiscuous mode 00:22:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x0, 0x40004, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x9, 0x7149e568375d1ff1) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000040)) 00:22:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, "38cef31ba4cc9ef6405c28cb8f5a6d6b1104e7b1d1647bc5847984e83be0c70ea28da7dba3adc02f1cc508a60816e870ddeae1af8a4cea45e622ece0703c6db2dd5c5378273da91b987b3a587d9cd64b"}, 0xd8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="bcef"], 0x2) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000100)=0x80000000, 0x4) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) r4 = accept4$x25(r3, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80800) fcntl$dupfd(r0, 0x8f69c34eb6815bfa, r4) getrandom(&(0x7f0000000040)=""/20, 0x14, 0x2) 00:22:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x0, 0x40004, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 371.179315] device nr0 entered promiscuous mode 00:22:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 371.288229] device nr0 entered promiscuous mode 00:22:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) sendto$llc(r1, &(0x7f0000000180)="d776acf38688c18e317c8143eb999a467720bc3a33907632d326f7073199c204b3d5a67b351beaac0205ce086bb5b22a1c25ec11bfb4184f6e407ead063df222183ea6574b038e857960a3e3d22bb404a0bcc8c6828ce89e538c519af0f67be4213e9b6bd0667e", 0x67, 0x4, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 00:22:29 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) write$eventfd(r2, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$FUSE_POLL(r3, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x4}}, 0x18) 00:22:29 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 371.516302] device nr0 entered promiscuous mode 00:22:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8501800000"], 0xfdef) [ 371.763481] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500) [ 371.786455] FAT-fs (loop4): Filesystem has been set read-only [ 371.805901] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500) [ 371.845045] device nr0 entered promiscuous mode 00:22:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:29 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = add_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r1, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000280)='!vboxnet1wlan1nodevvboxnet1:vmnet1\x00') fgetxattr(r0, &(0x7f00000002c0)=@random={'trusted.', '\x8b&vmnet0\x00'}, &(0x7f0000000380)=""/154, 0x9a) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x171) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 371.943560] device nr0 entered promiscuous mode 00:22:29 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x34}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000000)={0x4f, 0x100000000}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f00000001c0)) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 372.096299] ucma_write: process 1478 (syz-executor.4) changed security contexts after opening file descriptor, this is not allowed. 00:22:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x140, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) [ 372.137625] device nr0 entered promiscuous mode [ 372.215322] device nr0 entered promiscuous mode 00:22:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6000fe00000000850000000d000000b7003f0000000000000000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x10}, 0xfe98) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x602400, 0x0) 00:22:30 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000240)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f0000000280)=0x14) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000000c0)='./file0\x00') mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20000008) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r9, &(0x7f0000000640)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r12, &(0x7f0000000180)='./file0/file0\x00') renameat2(r12, &(0x7f0000000100)='./file0/file0\x00', r12, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000180), 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x2c0, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r4}, {0x1a0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0xb8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x14}, 0x1) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r16 = socket$kcm(0x29, 0x5, 0x0) r17 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x10000) write$P9_RLERRORu(r17, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x12) ioctl$TUNSETVNETHDRSZ(r15, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r16, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[@ANYBLOB="00e864a79e89d0454863010020"], 0xfdef) 00:22:30 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 00:22:30 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x34}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x4000) 00:22:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r5, &(0x7f0000000180)='./file0/file0\x00') renameat2(r5, &(0x7f0000000100)='./file0/file0\x00', r5, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000040)=0x1) [ 372.685316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21418 comm=syz-executor.4 00:22:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x9ee7305808004e55, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = add_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:'}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) r3 = open(&(0x7f0000000280)='.\x00', 0x600000, 0x20) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x1, 0xcf, 0x10000, 0x101, 0x4, 0x94, 0x9, 0xffffffffffffffc0, 0x20000000000, 0x1, 0x1000, 0xacb}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xf0, 0x1e0, 0x1e0, 0x1e0, 0xf0, 0x340, 0x340, 0x340, 0x340, 0x340, 0x4, &(0x7f0000000140), {[{{@ipv6={@rand_addr="88b66f118a1d6b0694e283b3deb92176", @empty, [0xff, 0x7f0000ff, 0x0, 0xff], [0x0, 0xffffffff, 0xff000000], 'nlmon0\x00', 'ifb0\x00', {}, {0x494c17978e89c66a}, 0x6c, 0xbbe, 0x6, 0x50}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x16}, @loopback, [0xffffff00, 0x0, 0x1ff0000fe, 0xffffff00], [0xff, 0x0, 0xff], 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {0x7f}, 0x2e, 0x10000, 0x2, 0x10}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x0, 0x1}}, @common=@dst={0x48, 'dst\x00', 0x0, {0x2, 0x1, 0x1, [0x1f, 0x100000000, 0x8, 0x3ff, 0x80000000, 0x27, 0x2, 0x401, 0xe8, 0x6, 0x3, 0x88, 0x9, 0x1ff, 0xe7, 0x3], 0x7}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1b, 0x7fff, 0x100}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 00:22:30 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x34}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 372.906460] device nr0 entered promiscuous mode 00:22:30 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa0100, 0x120) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065b489431c5407040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b879d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c19822999ea2eb356df3c16242b930188a4f8844e76aff0e4f74a6d4213fc86ca74fef7f23752646565cef1429497238b1a2e388fbf0e9bfa9ac87dd5dedd001554209a4cd64640bb992aea2c793b5ca81cf9f92b0d4236e6ae16c3588018c2fea8629c6f51d43bce12da1971d20f7e9bdfb045e6917167b1641cb1f5b00fc5ae8a9d5777079a809221061fea9eb34350b000"/441], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000000c0)={0x1, 0x2, {0xffffffffffffffff, 0x1, 0x5, 0x2, 0x9}}) [ 372.976962] device nr0 entered promiscuous mode 00:22:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x2e, &(0x7f0000002600)=ANY=[@ANYBLOB="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"/465], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xfffffef1, 0x0, 0x0, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1000, 0x4000) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3, 0x240200) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000580)={0x1, 0x0, 0x2080, {0x2000, 0x0, 0x1}, [], "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", "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"}) statx(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x80, &(0x7f00000000c0)) 00:22:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000000c0)='*:@trusted\x05rustedem0GPL{vb@xnet1GPL\x83\x00]\xf8') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2722006386dd20"], 0xfdef) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) recvfrom$ax25(r3, &(0x7f0000000040)=""/32, 0x20, 0x0, 0x0, 0x0) 00:22:31 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40000) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xe09d, 0x2, 0xfffffffffffffffc, 0x0, 0x8, 0x5, 0x1, 0x1, 0xffffffffffffffb5, 0x100, 0x7}, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x5}, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x6, 0x4) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r4 = request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a922ac7", 0xb2) r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = add_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="be54e45dda939fc663ffa7522b01339c643a08c049213856e4e3c581815df7dfc5188097d312ceacd17969688d45a49ed74723ecf952846fa1b730641ea212a7e6486b7e42b1ff204f19f323d8f26d78ea1e92ad2dfa4db9746f2bc393f70a5a3fd038a2f2b03721a76c43291c", 0x6d, r7) keyctl$dh_compute(0x17, &(0x7f0000000380)={r4, r6, r8}, &(0x7f00000003c0)=""/85, 0x55, &(0x7f00000004c0)={&(0x7f0000000440)={'sha3-512\x00'}}) 00:22:31 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="005186dd20"], 0xfdef) 00:22:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000003000000bfa30020000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000fdffff64040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f2a54fd091d87e5a3574f45404186e39d3fdace3d07915e5f46d3dab5a14fac04ceb1d536552ef81e83c718c775ae7ae29a9b152d038617162801672fede57d589e9dbe350b76a0f76905a03d7fc7ed387de2b15bbe17dd629593f8aef52b507976d9eb7f4f12a32bf7f94e9a3297e558655780671c0f402a894bede1863a0e9e256fb6cb3657ec45ef55b89400859bbe5dd2a781cd6643457986614ca3bbb6f66b24f8c2cc0e0b9c1afa090e250315010d7c0f8d91594281dc27a8736eae3bd3ce06ec29f31d7bcf5b524729728aac97dbb453ce28c83549d764e09577f9923ad963"], &(0x7f0000000080)='syzkaller\x00\xe9\xa0\x13+\xf8\xd0\xa3\xf6n\x95\xc8\xd0\xb9\ne\x89=!\x13\xb9\xd5*\xbb\n(\x15F9\xd6\xce&8\x8e\x8ds\x12\xa4\x81\x84-.2\x9f3T\v\x11#\xc7\xdd\x89\xfe\xdc\x1b\xfb?\x87\x19\x86\xbe\x88\x96\x8f\xb5\x17$\xff\x90\xe9\xd4\xf62S\xed\x00\x9e\xcfK\xeezu\xc2\xb8Z\n\b\x00\x9e\xfc\b\xc1%\x89\x1d\xbd/\xfb\xc4q\xae\xedX?\x00\xe6\xb9\x9bz\x9e\xd1j5\x14\xcbS\xc9\x1f7\x1d\xb7}\x15\xe7SD\xc3\x02\xf3\xaa\xeb\x19F\x9a\xdc\xc2\x9c&\f\"\xc0\xa6\x0eW-\xef,\x83\x83k\xe7\xb6y\xae4\x9c \x00x;\xb8\xd0\x05\xa2e\x8b\xdfQ#d\x86\xe7Szk\xcd` H`\xb4\x8d3\xe0[\xb4\a\xad!\xeb3\xf5\x89.oo\xdd\xe1b\f\x9e\xa3`\xb9SC\xa5\xbd\xca\x9c\x154\x89\x1c\b\x86\tL\x84\xba\x1b\x83n\xd5\xde\x8e\x11\xc8$\x97\x00\xd5\xeb\xa1<\xee\x9e\xd5\x9av\xd2j\xb8yUu;E\xf5\x8bq\x83\x1cD\xc2\x03\'0\xef\xebN\x02\xae\xe6\x80CG\x83~\xac5\xb47\x06*L8\xf4\xacP{\xa6%\xf4\f\x19\xaa\xf1\xf9Z,8\xb1\xbc\xda\x05`t\x17\xc5j\x85Sv_R\x17\xff\xf6\x92\xd2\xa0\x9f\xd8\xb2\x1er\x0eq\xb5is\xf1\x91\xae\xcd\xae&\xd4>\x17\xf3W\x06\xfc\xe3V`\fT\t\xbe0_=x\x19j\x1ax\xdb\xf2_\x932Ug\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x2}, 0x10}, 0x70) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x80c00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setresuid(r2, 0xffffffffffffffff, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0xffffffffffffffda, 0x8, {0x6, 0x2, 0xc6, 0x101, 0x2b9, 0x5, {0x2, 0x4, 0x9, 0x8001, 0x4, 0x5d, 0x4, 0x100000000, 0x1, 0x101, 0x7, r2, r4, 0x2}}}, 0x90) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00') mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) [ 373.499462] device nr0 entered promiscuous mode [ 373.582760] device nr0 entered promiscuous mode 00:22:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcc2}, 0x48) 00:22:31 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x3fb, 0x1, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="006386dd46"], 0xfdef) 00:22:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:31 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x70) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x9, {0x5, 0x3, 0x4, 0x1ff}}) [ 373.772045] device nr0 entered promiscuous mode 00:22:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xd4) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xde, 0x200000) [ 373.847207] device nr0 entered promiscuous mode 00:22:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x40042, 0x0) getegid() ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x10c02) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x7f, 0x3, 0x9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 374.014047] device nr0 entered promiscuous mode [ 374.109007] device nr0 entered promiscuous mode 00:22:32 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="016a86dd200849e5a602c70f9a8dd3d06d84c1a5dd0d54c2b02e26ed08f6d35254729e382d723523cb6fa69c7eacc6e753387c5430e62406d27c9c91d20f2502ce45dfc868341a26bb7c7f2db37caf3c96ec021b652966042a7f231272098484f40d7bfdf91eaea8127cd32a23991591e193f390a5882cd1d3c79a3bc9dfc5e7faf5088aede7d26b62eb8fe07078"], 0xfdef) 00:22:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:32 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x8, 0x80000) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000240)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r7}}, 0x171) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x5a6}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x400, 0x10}, 0xc) recvmsg$kcm(r0, 0x0, 0x0) [ 374.329619] device nr0 entered promiscuous mode 00:22:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x80400) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 00:22:32 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000280)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) setresuid(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=@migrate={0x16c, 0x21, 0x2, 0x70bd29, 0x25dfdbfe, {{@in=@remote, @in6=@empty, 0x4e24, 0x400, 0x4e23, 0x3, 0x14, 0x0, 0x0, 0x3f, r1, r2}, 0x6e6bbe, 0x3}, [@sec_ctx={0x38, 0x8, {0x31, 0x8, 0x1, 0x6a14a18e, 0x29, "279773346a049ffb581736e3f64e2f50ed7fd2307ddadb406731e0823fabb4606924b117d7bc338e03"}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0xffffffffffffff80, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x6, 0x4e21, 0x4a0, 0x2, 0xb0, 0x20, 0x32, r6, r8}, {@in=@multicast2, 0x4d5, 0x33}, @in=@rand_addr=0x1c, {0x8, 0xb3, 0x40, 0x8, 0x400, 0x2, 0x2, 0x7fffffff}, {0x5, 0x9, 0x100, 0x9}, {0xffffffff, 0x8}, 0x70bd2c, 0x0, 0xa, 0x4, 0x1000}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 374.475627] device nr0 entered promiscuous mode 00:22:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x3a4, "a283b69fbd5808ef585bc56f940d1fd5a330e49505dfd236cf8a711b57853dd5ae304d44e98ac5bab5d6851ffee35b52551b9d8f4153bb4e3b0b3135e72ffa1c841d551ea4206aaea3c34d40abb03e4b902b97d42628dcd7105cfc69905708eb7afa0ca89d6774b9391af02950f4ff459d6e111ee23d215e5421b3090c40360efd63edd92a700d02e8af97090a0fa0a508613d547f5e8ba44fb966776b84de9c08ea666c70ca6b823623690519a701fcee219cb88747a20ad5450e200877916bf7bab7f9e557fb61832bf1cfcf80ba04263105ab5f1f5048b94cbeab5e29ebe9f0d44548a4db3ada10dc"}, &(0x7f0000000000)=0xf2) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r1, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 00:22:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) prctl$PR_CAPBSET_READ(0x17, 0x14) [ 374.624973] device nr0 entered promiscuous mode 00:22:32 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x0, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 374.683641] device nr0 entered promiscuous mode 00:22:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x9, 0x10400) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xec, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1e10}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0xfca49d836efe0ef0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1a}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xaf18f41ffaa68a2f}, 0x50fd675842905893) write$cgroup_subtree(r2, &(0x7f00000000c0), 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)=0x1) 00:22:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 374.847465] device nr0 entered promiscuous mode 00:22:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$NBD_DO_IT(r1, 0xab03) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0x41, 0x10, &(0x7f0000000040)="0a64091499aa179a9336b1088295e10bfb2ab8470fa14236faa56d3e730850", {0x8020000000000000, 0x2, 0x955547c3e3a84182, 0x0, 0x10000, 0xf7a, 0x6, 0x8}}) [ 374.946858] device nr0 entered promiscuous mode 00:22:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/307], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') 00:22:32 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x208100, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/307) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:32 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x0, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x70) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) setsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000380)="de8e95784261db6c3c5dc4bcd958afc334041c47a0baf10ccfdfaf9fcec31c969029734eee654a718134beefb3c3bfa8a3f0469cbcf85917c93878d95a83c87832f5d9111a0efeb8f6aa360da1f62dc9cf119de5516e7e5ccea161f27067d7c7a3155a5e39fc86f96dfe73d3e80e6ea7757770186f328efe7bcba6189f5183bfc0b3bcb8d4b336f9dba7e32668f2e449bcf8dfa096cdb7c4a6fb8029cc003fc1", 0xa0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x97, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=""/151}, &(0x7f0000000280)=0x78) socket$bt_rfcomm(0x1f, 0x3, 0x3) 00:22:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:33 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0xfffffffffffffffe, 0x4, 0x9, 0x0, r0, 0x200, [], 0x0, r1, 0x3, 0x3}, 0x3c) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x389}, [@map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xffff}, @call={0x85, 0x0, 0x0, 0x65}, @generic={0x501c, 0x100000001, 0x492, 0x8, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xed, &(0x7f0000000100)=""/237, 0x0, 0x2, [], 0x0, 0x14, r3, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xd, 0x800, 0xffffffff}, 0x10}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 375.386989] device nr0 entered promiscuous mode 00:22:33 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x3, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/t5n\x00', 0x28003, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a76686dd20"], 0xfdef) 00:22:33 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x0, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006586ffff"], 0xfdef) [ 375.808516] device nr0 entered promiscuous mode 00:22:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 375.897670] device nr0 entered promiscuous mode 00:22:33 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="9529030af86154ccd2ba888068dbe483259ab1e909d1812fc9b4638c54c1f8c4a1f9faa0c3b0f6e5c56fc99b73cc76bf793645fba1b2a0063f048176bb9fc4217987e6d60c2539bebd8ae74a2526bd31016a8603472f7b433e014cb7a78781e3329e9544c17cd41c662b1333fc594c1d3b350ea711417e93d10497425bf3b46ccf85c0a938dcf76dcb7e1f906107474d24872fc25780749ee1c6f472d25351329f89cbb4abf6050ae39fd7efffca5b14b9e6171a4efa1aae6d1305da9349d50214b924892f6ac5ef1d29888fe1f3329824c68997") socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) times(&(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:33 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, 0xffffffffffffffff) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) getgid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x68000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r2, 0x100, 0x70bd25, 0x0, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x5, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 00:22:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:utempter_exec_t:s0\x00', 0x25, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$TIOCEXCL(r2, 0x540c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:34 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0xffffffffffffff51}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', r5}) [ 376.307535] audit: type=1400 audit(1568938954.022:67): avc: denied { relabelto } for pid=21652 comm="syz-executor.3" name="TCPv6" dev="sockfs" ino=73045 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:utempter_exec_t:s0 tclass=tcp_socket permissive=1 [ 376.452204] device nr0 entered promiscuous mode 00:22:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) exit(0x26) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4a0173aa02"], 0x5) 00:22:34 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, 0xffffffffffffffff) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000000c0)=0x2, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x4142) 00:22:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 376.705462] device nr0 entered promiscuous mode 00:22:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = getpgrp(0x0) r1 = getpgrp(0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) kcmp(r0, r1, 0x0, r2, 0xffffffffffffffff) r3 = syz_open_procfs(r1, &(0x7f0000000040)='autogroup\x00') r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20000008) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa535}, [@exit, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x1, [], 0x0, 0x2f, r5, 0x8, &(0x7f0000000140)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xc, 0x1, 0x1}, 0x10}, 0x70) 00:22:34 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)={0x3, 0x9, 0x3, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0xf2d1}, {r2, 0x0, 0x200}, {r3, 0x0, 0xfffffffffffffcbb}]}) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc02766f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff6000000000000000000000000251982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mlockall(0x3) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x440000) 00:22:34 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, 0xffffffffffffffff) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040), 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 377.518346] device nr0 entered promiscuous mode 00:22:35 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r10 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r6, r10, 0x0, 0x8000fffffffe) 00:22:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040), 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='Qdev/net/tun\x00', 0x480080, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x101000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)=0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="006386dd2080d4750c7d1aa91a875186080b4292cd9788daa2e2c3a0c4986b066f24e530b6920e9dba09b3588afe8bc4d7d82e69f4c40b9ec5a7c8e77820505583c21c30a2ef70b4cc030f3d30dce77da17bedbc0cd60d2b36a138ce6d610d3b4832272f32bd0483561a46536c6191bb486f61b366261813db7ca709c1a9ae5ed4a9135168ae3d6ab4409bebedad"], 0xfdef) [ 377.688813] device nr0 entered promiscuous mode [ 377.750594] device nr0 entered promiscuous mode 00:22:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x4d, 0x0, &(0x7f0000001300)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 377.894832] device nr0 entered promiscuous mode 00:22:35 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffff, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x9, 0x10001, 0x1, 0x0, 0x1f, 0xc4}, 0x6}, 0xa) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={0x1}, &(0x7f0000000040), 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:35 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r10 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r6, r10, 0x0, 0x8000fffffffe) [ 377.998438] device nr0 entered promiscuous mode 00:22:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffae, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000006c0)="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") 00:22:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0fd00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a8695c6f5c50b890a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f264303a2a329cf320862037abcec3080929587c4e7d1db34a1579238d4bb1f888afa219f5b49c6182030013c45f755ff45d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc0270bd9bbf7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 378.165478] device nr0 entered promiscuous mode 00:22:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000)={0x2}}, 0x3fc) [ 378.244476] device nr0 entered promiscuous mode 00:22:36 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x10}, 0x70) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:22:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x3ec4ba9506168d56, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:36 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r10 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r6, r10, 0x0, 0x8000fffffffe) 00:22:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80, 0xc0000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={r5, 0x0, 0x3, 0x20, 0x6, 0x7fff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 378.431201] device nr0 entered promiscuous mode 00:22:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040), 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 378.515989] device nr0 entered promiscuous mode 00:22:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'lapb\x1f5,b\x91!N \x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'lapb0\x00', 0x2}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="005686cd20"], 0xfdef) 00:22:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/\x1f\xf4\xff\xff\x82\x00\x00\x00uun\x06', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)='/\x1f\xe1\xff\xff\x82\x00\x00\x00uun\x06') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00633ca7205618e232d2e51dc2f4721fed5e3ffe660366bac82b1900000000b00500a74e7c7ed3cee6d42da9f641ca9bd1bc0035fcbe5f804395aa6b"], 0xfdef) 00:22:36 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x6, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000017c0)={r5, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={r5, @in={{0x2, 0x4e23, @remote}}}, 0x84) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:36 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x0, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ipddp0\x00', 0x100}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x213be27b7f9de1bd, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000280)={0x30, 0x53ecd188b17da3a5, &(0x7f0000000340)="3db75e7ead5e5c4f464dfe5cc31b2476a9b6e10b54b8f2813c1709c42ecacb9248b4b08a2830e89e9a2c903be412cb20fb05cf6600447332651ca2fc4d72b2149d92737b8bcc004d8e135da6b03a50bd0ef1b971a354431e407ce4472da99550d2e2f09bb2ccd2939dc14368f2fe551b2669ab570690125f1c0d50cd8223b12df8fe18a89b739a853c4c0a80b9e25cf8bed8cb7cefc0323d86b5853ab9308d9971d9", {0x6, 0xfffffffffffffafa, 0x20323159, 0x6, 0x80000001, 0x7, 0xb, 0x3ff}}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000000)={0x82a, 0x0, 0x101}) 00:22:37 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x0, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 379.347027] device nr0 entered promiscuous mode 00:22:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 379.445118] device nr0 entered promiscuous mode 00:22:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 00:22:37 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$RTC_VL_CLR(r0, 0x7014) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4d2d2aa85f264e6a990a028d00016f08dc1b8ef3ff11d236ae031f26b2a61b5aa80206000052201db24e1d76ad2fa463e3d87b91a5279230768b1ecf"], 0xfdef) 00:22:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 00:22:37 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:37 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x10}, 0x70) write(r0, &(0x7f0000000040)="d40920ec77051fe94a419edb4d6d87cca2e207d83c4bb8fdbf39ddcd9e652fd0c954ceca11173919e79ef4fd90997ab1a30976e05bc79856d4c5644bb7615c734417ed99ac51dad00edb234fbd4dc0900ede4f78583c03b6381b9f3be1898056585d13db488c3d023aaa0fc37b0a4687b33f9c939b22c6ce919973fd0941326f3b86286198a20557a4", 0x89) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000003040), 0x4000000000003c4, 0x0) r2 = dup(r1) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffff, 0x9, 0x12, 0x0, "03fe12bf0c87d91c187f19411ae348a1a50f49ba4689fafcf23a44d736234d11949b10074258623e6185d313fe6353054359c5ebd0cfba1a3bf1b44e3c5c38f6", "7bbd24c31f8c23e586142a053def03b847b32193bab3fccab2da1dd1db18866f", [0x7, 0x6]}) 00:22:37 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x0, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0xd6, 0x7f, 0x4, 0xb750, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r4, &(0x7f0000000180)='./file0/file0\x00') renameat2(r4, &(0x7f0000000100)='./file0/file0\x00', r4, &(0x7f0000000000)='./file0\x00', 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a922ac7", 0xb2) r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = add_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)="bd9a53ba9412e3fef2fd5b57ed291c66b9389c1f8f7956f0ee7579b4abb95cbb7024f8f3e137324643a6f335b25bf6908eff357e25f6a28c44e4b165be554a66e033c844294c3a44f412a5dc5cdb4215af785dd6adedb683f31a4a54516764f5dd9bf229876999f6d17dde78c685fd86a146c8f999115186749fe873f6b19e50bb191241e0ba2d1e44581f076ec7b267a1944badc9cb0544ed1506900b1fedcdfb9c0ed3984043eae53ef2ac", 0xac, r7) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r5, r8}, &(0x7f0000000440)=""/54, 0x36, &(0x7f00000004c0)={&(0x7f0000000480)={'sha1-avx2\x00'}}) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x9, 0x0, 0x0, 0x0, 0x9, 0x2000, 0xf, 0x5, 0xec0, 0x7ff, 0x2, 0x401, 0xffff, 0x7, 0x0, 0x8, 0x8, 0xaf, 0x5, 0x7, 0x1, 0xfffffffffffff7db, 0x4, 0x5, 0x2800000000, 0xd10d, 0x6, 0x800, 0x2, 0x64bc, 0x5, 0x2000000, 0x1f, 0x800, 0x7, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0x1}, 0x5954251d541ade8b, 0x7, 0xfff, 0x1, 0x9, 0x7, 0x5}, r3, 0x10, r4, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) mknod(&(0x7f00000006c0)='./file0\x00', 0x4, 0xff) [ 380.005378] device nr0 entered promiscuous mode [ 380.073867] device nr0 entered promiscuous mode 00:22:37 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xac) getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000180)=0x4) [ 380.233534] device nr0 entered promiscuous mode [ 380.328979] device nr0 entered promiscuous mode 00:22:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0), 0xfffffffffffffde3) [ 380.456643] device nr0 entered promiscuous mode [ 380.527083] device nr0 entered promiscuous mode 00:22:38 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8379efd83081ffde) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e36286dd201ed422e113aa175fcf8a80cac12ae9afb8f691101c62ec082a656beb8e07bb93323518c55446dacc3d3e9937e097"], 0xfdef) 00:22:38 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:38 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x9}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000017c0)={r5, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000180)={r5, 0xe70a, 0x100000000}, 0x8) [ 380.688384] device nr0 entered promiscuous mode 00:22:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 380.772897] device nr0 entered promiscuous mode 00:22:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x101) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 380.928636] device nr0 entered promiscuous mode [ 381.000188] device nr0 entered promiscuous mode 00:22:38 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'memory'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x0, 'io'}]}, 0x7bcdf2d125d39d4) 00:22:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2, r3, 0x101}) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r4, &(0x7f0000000180)='./file0/file0\x00') renameat2(r4, &(0x7f0000000100)='./file0/file0\x00', r4, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) [ 381.184188] device nr0 entered promiscuous mode [ 381.256093] device nr0 entered promiscuous mode 00:22:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x202042, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x3e, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'cpu'}, {0x2d, 'io'}, {0x2b, 'io'}, {0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'io'}]}, 0x2a) [ 381.409866] device nr0 entered promiscuous mode 00:22:39 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040)) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/d:\x17Y;et/tun\x00', 0x10000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:39 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 381.491118] device nr0 entered promiscuous mode 00:22:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x0, 0x0, &(0x7f0000000100)=0xffffffffffffff2d) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4800, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x100) recvfrom$rxrpc(r3, &(0x7f0000000140)=""/115, 0x73, 0x1, 0x0, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000040)=0x101, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) userfaultfd(0x80800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = socket(0x9, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0x31ca44332dddbcb6, &(0x7f0000000000)=0x4, 0x4) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/dsp\x00', 0x2e7f4ee1ac3c312f, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000b00)={0x2, 0x5}) 00:22:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(0x0, 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:39 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20002002) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0xd55194ad18a82d3e, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) r2 = geteuid() socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xb) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20000008) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000380)={0xf20}, 0x4) setreuid(0x0, r3) setresuid(r3, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r5, &(0x7f0000000180)='./file0/file0\x00') renameat2(r5, &(0x7f0000000100)='./file0/file0\x00', r5, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000300)=0xc) getresuid(0xfffffffffffffffd, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000340)={0x3, 'ipddp0\x00', 0x2}, 0x18) mount$9p_xen(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x140000a, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=xen,mmap,privport,cache=loose,privport,fsname=nodeveth0,fowner>', @ANYRESDEC=r2, @ANYBLOB=',context=user_u,smackfsfloor=keyring!,smackfstransmute=,obj_role=,seclabel,fowner>', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r6, @ANYBLOB="3c04"]) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x101000, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000280)={0x18, 0x1, 0x0, {0xf5}}, 0x18) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x2, 0x4, 0x8}}, 0x14) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000040)=0x52ad, &(0x7f0000000080)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) [ 381.777218] device nr0 entered promiscuous mode [ 381.850480] device nr0 entered promiscuous mode 00:22:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/50) 00:22:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='\x06\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00', 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8008010) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:39 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:39 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0xa24) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) [ 382.091412] device nr0 entered promiscuous mode 00:22:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r5 = syz_open_dev$usbmon(&(0x7f0000000740)='/dev/usbmon#\x00', 0x7, 0xbbe471655b1c0d10) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000000c0)='./file0\x00') mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000003040), 0x4000000000003c4, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vcs\x00', 0x40, 0x0) io_submit(0x0, 0x4, &(0x7f0000000a40)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x5, r4, &(0x7f0000000640)="0485d94ac095c9b58435573a4cf41cef1e9e633da1dd39f2b2a27b7946f23b9733c8dcb839b0bb2bebc1fafbc59e0507382116856c25e88b744cf38de527810390cd1b314e865a34cf7ec263ae2fba14587be44ec46a8485f468a446e348e0fcba3cbc2de5c4afb39e36cb5a1a2a861f92a8fb1fdacfafbb4f1d79457b19098d82a29789f031a9fce1dfbf81c567162a7cc20661029eb30129ea9c956990f0c63c30e74200b6ed64ef9df2811fc567e835ce47be444a7b068d77e9c104e2b0b52c408419480d74c08ba2d3c2d8e205f47f3401326e9bcd933aa90bf88611f4648369e4397e9c4d48b3", 0x0, 0x74, 0x0, 0x0, r5}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f00000007c0), 0x0, 0x1, 0x0, 0x1, r6}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3ff, r7, &(0x7f0000000840), 0x0, 0x80000000}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x3, r6, &(0x7f00000008c0)="00d6614bc6699b846eb8248ade5e9e5f4166510eea9746fee910e1a0b0cc6b6483cda47e6d3fc5a4ec36d1d49ea55cee12938b0d0c5ef3cca4c589c2e1c26dd8d95f74a3fef4d252a672a0715fcf4cdc219e710285139352cc73f8123dc21a91e531cd4131e279bc3211e7094f246f7805ae9b992244ee43eae8e0448263477832ec2c927644e1e10031aabe4c94abca7a96156a5c67e0903c59df449def13f4b15679aac525da6ec1649daef8669835245be1f195315e252d9acc6b0924427b976676fa66be1cc57b0875a5a124f0d18fc55bcc3d07f0f63f686742c62e2533c78c53a6f7", 0x0, 0x800000, 0x0, 0x3, r8}]) 00:22:39 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = accept4$netrom(r1, &(0x7f0000000200)={{0x3, @netrom}, [@null, @remote, @null, @rose, @null, @rose, @rose, @bcast]}, &(0x7f0000000280)=0x48, 0x180000) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000340)={r2, 0x7fffffff, 0x81, "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"}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket$inet(0x2, 0x6, 0x2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140), &(0x7f00000001c0)=0x8) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x26) r5 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x81, 0x40701) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000040)=0x1000) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="6382439db71429f200e7763c8b1d1e746f2b769cf1f9ef64cb0350", 0x1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000003040), 0x4000000000003c4, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000080)) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000100)='./file0/file0\x00', r7, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) socket$pppoe(0x18, 0x1, 0x0) [ 382.175747] device nr0 entered promiscuous mode 00:22:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[5\xa2\xf5\t\xd3o\xefn\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\t\x00\x00\x00\x00\x00\x00\x00\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x00'/418) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(0x0, 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="958664e860a3a167006a73"], 0xfdef) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x3, &(0x7f0000000040)={r2, r3+10000000}) [ 382.488555] device nr0 entered promiscuous mode [ 382.546449] device nr0 entered promiscuous mode 00:22:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x9b9796170a652acb, 0x2, {0x1ff, 0xc4ee, 0xcd8c, 0xffffffff}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 382.635638] device nr0 entered promiscuous mode [ 382.700884] device nr0 entered promiscuous mode 00:22:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 382.805815] device nr0 entered promiscuous mode [ 382.875199] device nr0 entered promiscuous mode 00:22:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3ff, 0xc1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2000}) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 382.969112] device nr0 entered promiscuous mode 00:22:40 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x800, 0x5}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/relabel\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000340)={0x0, 0xff, 0x101, &(0x7f0000000280)=0x10000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x800, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000003c0)={0x7, 0x1, 0x3, 0xffff, 0x60, 0x5}) [ 383.017661] device nr0 entered promiscuous mode 00:22:40 executing program 2: r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000ac1414aa00000000070000000100000000ac1414aaac1414aab22784c14c735495e25d8a0f553928d62983565c8340904d73377bec73dbdbfa5dea45bfde38b817d725e2100f956ac0dbe4892d59f4432be2d78f16667386bed1e67adb922558697f0846bd1939d2ed9bb764c7d1971973"], 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000fd"], 0x1}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000080)='veth1\x00') openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 00:22:40 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x10}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc01d) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xf37, 0x12003) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getpeername$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7fff, 0xc040) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1, &(0x7f0000000380)=ANY=[@ANYRES64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x70) 00:22:40 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f0000000080), 0x36c05b63a2664064, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x800) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x10) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:41 executing program 4: link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000380)=@ng={0x4, 0x4, "bf3bcbfb559bb5c51a85faa991f5111d22e3432c"}, 0x16, 0x3) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x2, 0xb1, &(0x7f0000000100)="325e7444f46fcc3d7fd7df3c5c2a5a31de480737e9736baae7a43ea434576a4dd7e23a96d4cca369dae820d536ac0e17365079665ea6a34f2de4619fc7a05fdfbefcb6a960ff962a7d8d2751ab6779ad928e509c566eb517a349205f1c27614dc587ef3dc5bb540e8e5a836868d29f891c54907610f9e0a9da12d8dfe300b3c439e94778d4f932f36815f67f16f16e1cceea421425c65d414529393b102d7dd346623d6fc40f6ef945dd19b0ebee9edb9c"}) socket$kcm(0x29, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xfffffffffffffda5) 00:22:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(0x0, 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00a003dd20"], 0xfdef) 00:22:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x141080, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000001c0)="83fafafed116806f09e397d740b453a1ec94faf7ac645f929e4ce53e8213134ce0da886549c3acba7a215f79d888e08c496b8c987adc0a506803647d", 0x3c) 00:22:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x2d6, {0x40, 0x3, 0x20, 0x9, 0x4, 0x100000000}}) [ 383.537850] device nr0 entered promiscuous mode [ 383.671019] device nr0 entered promiscuous mode 00:22:41 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x11000, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="00630eae188183555cef131a28f2d77d7fe7e0f0866b50510f1508c440a9c76e69816ea872947f8f38c8ff6fe7904f8f8e770261348db392db1e8a646c716741429188645c71c807aa4ae077495e4f9e455a1ee7ed75eb8527e13ef06a850f62a0cef05a2dbf2c25da9874acbd2ef47b9b14730067439660ae020b25b8480100000000000000e3f792dd5e1c7d62c24a92dd11c771e31c01d3f91e343cc0ac72a3893d2cb972021018dc8debf6df9c0789eefb8e5fce19b7034d6e0907a541545ceaccb4338e1ea600e93982a005f65e2942f6910974ce23e215431154398738e436cee48c427ba6"], 0xe8) 00:22:41 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000040)="bbb556642c5ef2b94a0084fd7acf08b4833bb082e2f01f6409ec0533ae4a1c0d5e8c2037fc5fadf3f3d801a13dd7534ced84e12f29e21197fe5b4499fc65cfc531c6a21e1d9dd0684b8a651909f62e5e83882fc114a4a116414aa6ac4305d7fac6985558c30be5f173a81cb7a8c886785f35c4f7df807971f91f3dd53f0d378eec6eec0e08b801fb91eb", 0x8a}, {&(0x7f0000000200)="9811fe2f45847463312d2efc190261286fddf5261aeabdafad87901c06a67a0a3e0fc706065a29cc1322d9ad39a8b0744c15c4b845dfa9e46dfcb1b983311a6d6fd906986b68421781609aee7a3f6b4062642dd4d8aedf0f097e1333b7377722a1d7d94c9d0e8b031b655bf81bf3cbc3e9478fb27b3236ec623df613d3041fc4cdc3faad0809bf09d07171890098b7b56bf87dc8e997c2149440d195bc2665eae6df3c5b1d2274f91bd1beaf724cc5ee161f12fca96daa56c533cc723c668c31dc54eb05bf940f5bb6fc887b82c7", 0xce}, {&(0x7f0000000100)="aa743e6ca0d0badbf7a04cacc3d1a50a9d68e75b99966e2a2ecb16f9c419663db9b8475d192fcea8496a8c31182bf7d32931f57f9d996b175d4a283b93674141592dd8bf08bf91d7133daa6526de4f", 0x4f}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000300)="a2e9f79cbd6b967e6846e067e81759de854cb1368caa39352cf95d057cdf2511d2a3040a40e4fe92ab78fc40d7b9d2b69e61b29f3fa4e8b4f9d0cbe19268b5e89dc5806d48ac48d64ab83b8563805603fa4931916049993ebfe8cf5c5febb126c58fa1215b2f3497ebf4707e099094de5484", 0x72}, {&(0x7f0000000380)="38eea7a9ccdc5945badca97b1b3a550dc486b1542f8c2fe807522a96b45a287e989e9aa5b8f627e4f27164e5aaf995914435561f684703a931a49a1a5b68d9489d19de9c", 0x44}, {&(0x7f0000000400)="158369cd3ba004c884fb6d4714f9db4fc4ac661b085a565c67031364a1ff50f88644dd905ad06f589c1b5ff5d581c1f2b497f3e9683e086645f80a", 0x3b}, {&(0x7f00000014c0)="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", 0xfc}], 0x8, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xffffffff, [@local, @loopback]}, @timestamp={0x44, 0x3c, 0x0, 0x3, 0x0, [{[@local], 0x3}, {[@remote], 0xfffffffffffffffd}, {[@local], 0xffffffffffffff89}, {[@empty], 0x6}, {[], 0x7}, {[@remote], 0xfffffffffffffff7}, {[@local], 0x9}, {[], 0x6}]}, @cipso={0x86, 0xa, 0x7, [{0x7, 0x4, "f813"}]}, @lsrr={0x83, 0x13, 0x2, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}, @lsrr={0x83, 0xb, 0x0, [@empty, @multicast1]}, @ra={0x94, 0x6}, @noop, @ssrr={0x89, 0x13, 0x1, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x21}]}, @ssrr={0x89, 0x7, 0x8, [@local]}, @end]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x6, 0x3}, @rr={0x7, 0x13, 0x9, [@dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffffffffffa}}], 0x108}}], 0x1, 0x8010) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000017c0)={0x0, 0x0, 0x5, @random="775a0aa1b956", 'eql\x00'}) 00:22:41 executing program 1: connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0xf00, 0x4) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01444dea4c5760e5e074b61023a1e92d7377a3ae6723e58064ddec11de039959dc88ac02ffbc71dbf9b5e23502768f01a1d95ab0573bdc07d9955092094f56913bba5f2b52ed830dd2ac658127693e8998", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000017c0)={r6, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x617, 0x2, 0xffffffffffff8000, 0x7648, 0x3f0000000000000, 0x2, 0x9, r6}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e24, 0xa2b, @local, 0x7}}, 0x9, 0x5, 0xfffffffffffff000, 0xff, 0x12}, 0x98) 00:22:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) timer_create(0x6, &(0x7f0000000040)={0x0, 0x4, 0x6, @thr={&(0x7f0000000540), 0x0}}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r1, r2+10000000}, {0x0, 0x989680}}, 0x0) timer_delete(r0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {r3, r4+10000000}}, 0x0) set_tid_address(&(0x7f0000000040)) 00:22:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x20}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x68000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r5, 0x100, 0x70bd25, 0x0, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x5, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x1ff, 0x4, 0x3}) 00:22:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) sendto$ax25(r1, &(0x7f0000000080)="55927d4ad07227632fdb05a7e609cd4b059253e0f0faf738c969addfcaf320e8", 0x20, 0x10, &(0x7f00000000c0)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 00:22:41 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 00:22:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006386dd20da3fff5d4a397a87a89e4d289c51650b37"], 0xfdef) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x80000000}, 0xc) 00:22:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x15f}, 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x10ea3, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x57a2) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000140)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x8000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x468, 0x468, 0x250, 0x250, 0x360, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc8, 0xf8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x6b1, 0xf856, 0x401}, {0x462b, 0x1, 0x4}, 0x3, 0x6}}}, {{@ipv6={@ipv4={[], [], @local}, @loopback, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0x1fe, 0xff000000, 0x605251b08b7dece9, 0xff], 'lapb0\x00', 'veth1_to_team\x00', {0x743016b6c27fbbf1}, {0xff}, 0x89, 0x3f, 0x0, 0x79}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0xfffffffffffffff9, 0x0, 0x1, [0xbc00000000000000, 0xb7, 0x56, 0x0, 0x100, 0x8164, 0xff, 0xffffffffffffffff, 0x20, 0x4d, 0x9, 0x50b395cc, 0x3, 0x3, 0x7], 0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@multicast1, 0x1e, 0x26, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast2, 0x31, 0x1d, 0x6}}}, {{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x3, 0x8}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x9}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x1) 00:22:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 384.392007] device nr0 entered promiscuous mode 00:22:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0589c4b6473e7a61f662e525f97dcbbb910890e85318577c2ff52388b09cd3c9b42f3032a5668cf5898f0df55b32e4019fa1c8c251a968ef99a0476264dbbebf6e8b1014c5b9f663e79550df75fc375c6243c46e0b8d8b3d769f27ba4c4a451bf5cf4b805662018bc245f5371017a475ba25899399c4250563ba20561afd3796bf98e2bdf03581c456008f0e72be0cd757cb12ac88fb99a9c3f90857121ab657ca0b375933f29a70ae0ef49d831e9c551e134b59aea3fb571fc330495ccc8ab5fda8f0e18c663b3d82a078b6641e78e81"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 384.466213] device nr0 entered promiscuous mode 00:22:42 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x8b, &(0x7f0000000440), 0x2db}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:42 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000001703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000068800b982f6d9200874f26af100f1365d2ce4a62037abcec3080929587c4e7d1db34a1579238e4bb1f888afa219f5b49c6182030013c45f7550b46d02b85a7b8c1827a6cd53a02518b6d25c5118b68e4d60d4f8979ad20859d2832cc027e6f70af7700f5e284cc4b87d25261d83f531d450d05b4099d27c43dde9718e75cfb3092a01e72fa7b90e0ce8c455e50b3c020086c73835568a2a1c9779637f2b4b9a20a74f42ff60000000000000000000000002c1982293d0e435f89b0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:42 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x280044, 0x0) getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000340)=""/158, &(0x7f00000002c0)=0x9e) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0xd000, 0x1, 0x7d, 0x200, 0x0, [{0x3, 0x3, 0x2, [], 0x7}, {0x7, 0x7, 0x4, [], 0x8}, {0xc, 0xb2b, 0x100, [], 0x3}, {0x0, 0x4, 0x6, [], 0xeb48}, {0x2, 0x4, 0x3e6, [], 0x80000000}, {0x20, 0x2, 0x7, [], 0x100000001}, {0x400, 0xffff, 0xaa94, [], 0x1}, {0x9, 0x1, 0xfffffffffffffffe, [], 0xfffffffffffffff9}, {0x3, 0xb8, 0x3, [], 0x7}, {0x2, 0x8, 0x9, [], 0x3ff}, {0xfffffffffffffff9, 0xffffffffffff0911, 0x9, [], 0x1f}, {0x7ff, 0x7, 0x9, [], 0x5}, {0x6235, 0x2, 0x4485, [], 0x100}, {0x1, 0x5, 0x3, [], 0x44}, {0x3, 0x101, 0x1, [], 0x5}, {0x436, 0xa37, 0x1, [], 0x3ff}, {0x24d, 0x2fad, 0x70, [], 0x1f}, {0x6, 0x3, 0x7fff, [], 0x106a}, {0x48, 0x3, 0x800, [], 0x6}, {0xffffffff, 0x903, 0xfff, [], 0x7fff}, {0x3951be3a, 0x2, 0x37, [], 0x1ff}, {0x2d, 0x0, 0x80000001}, {0x5, 0x9, 0x400, [], 0x20}, {0x0, 0x9, 0x1, [], 0x100000000}]}}) r3 = getpgrp(0x0) r4 = getpgrp(0x0) r5 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) kcmp(r3, r4, 0x0, r5, 0xffffffffffffffff) ptrace$peek(0x2, r3, &(0x7f0000000440)) r6 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x8, 0x47425247, 0x2, @discrete={0x7f, 0x75c28b1e}}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000400)) 00:22:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) renameat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'bri\xaa\x128\x00\x00\x00\x00\xfe\x00', 0x4005}) 00:22:42 executing program 4: ioperm(0x80, 0xd8d8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0x10}, 0x70) [ 385.052344] device nr0 entered promiscuous mode 00:22:42 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xfffffffffffffc8c, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000003040), 0x4000000000003c4, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 385.125300] device nr0 entered promiscuous mode 00:22:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000017c0)={r5, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r5, 0xfffffffffffffff7, 0x0, 0x15, 0x1}, &(0x7f0000000140)=0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x50, r4, 0x400, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x789e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4367742e4dc98a88) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfd7df3fb181339fb}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5655}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffffffffff3e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:43 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 385.359086] device nr0 entered promiscuous mode [ 385.429128] device nr0 entered promiscuous mode 00:22:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) r2 = dup2(r1, 0xffffffffffffffff) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x5d, "c063bdc1be94a67bd1180afcdecaca33fac1571a7f7dfdd8a5c42e90c310d2ac005fe05d4ad1ca9385d206f89fd813ab92074f25b6b30c05161f904e5bb0aa4483c18cc4f420a706f43825fbd405eec137447e385e14404472edbcda06"}, &(0x7f0000000280)=0x65) sendmsg$inet_sctp(r2, &(0x7f00000002c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="dc94a12769a2daec13b9a1c2924655150eecdb2fc17b13dc50d64b18f12e9d433b48ff1db865e84c29d7c3d3b90a795f0187a3c9b0fbd7cabff6208fc8ba5329472b4da9d266fa6ad832f0ab16", 0x4d}, {&(0x7f00000006c0)="6307b9f428edfc45499792a730027d0d1e7d59f57616e188318fa9b18c0ffb1964d2ce02782635da188f6c70bb1148554a7a46d64405bcc4d0e47a69abca0dcb3d499f51bac7de9b595cbf887c769156f9c2327c07ce19e269ac491d30e4bc9368285856271d421b83e0bde9cae0fc6d96ae57387c07b05150b1602eb4f96c6b54478fcc9338037cd291f0eae40c9bcc0b0d41da2f375499bb8d7f62252df48dc8cf1f803d02c80e679ec286ffb032cc49bf6ee61afc33f88420be798a7172763a50191ecb1efd0657a948944308283e45ad98603bd1cec5f6342bb7f4d34831d143f001aa7c8c8b8eb4cab3e359621ad74b0741cbfc5e3fa50ed05e2919db0cb06defb3d2b74f25a88f07875e8f9a93db721b8b61733a670e1e0f1c2b4c14a907942323e90d6dd34f20fbc5326210188051111088ff7affae5ff4c179a7fdda91e84698d4b953221c57f4d7720b3beb4860ba69f7e103392c2bd428c35d7b8c02b666f13ed0396124d1ed7b3c8183dad927fc9d1e6b45493db6de7eb9ebfc66e6bbcf7ad23b7df544787a0ffa23d618fbb0ac7034e8ac95f6b94db730d11344fd4c7eeb515bbe7e5c5f242477abf57cd05235e0f82aeab0189767c8754616efd8cf96ebe35619846193b96a5073d638c1d22113517ad23f38fd244a672ceb8e177cdc75d7518242d540e84b62eea86ba8043fc5150e92a312bf212ede45cd719909002c91f7df7d6ebce580e01d67b8a051955956ada363de495199cdb4a5a97fb7a2dc07744f8b3e5a36014ac9904ff106b2dc89d15996aa13f3b5d0abc2129f231ac20b5fc939f6cfefbd7cccd04405df9218ffcf242b550c030ac80d069ef30255e257f3274cd1bfd3042a406b9a095bacdc081f586bf0cd82798b379be8ada72a74c453465dd9aa27998f024147e02c92147f8eff4ddabee125da07ee13619a016738138406f2b542c92dc1270d062fc985b96b3d282ba67d5508343f5ea529a85cfe3a456d91d58031a972b3ad9e2f0713f394a86936c1c16e63bcde2a80509eb44b54f7a4d128e8085703f8f69c58570cad2cea3ecf54a30d79577b713ac7857dc8dd1cf942d54520df1011163008ef1a28c5f0639e2d366ff15393a109ba70607754b4fb0d27de94a2f5f2ea571717ddaed63946bf69112bd493fa6193e2085c58165de84a74c6d60e32c6995da764e5be699f6e48c72d18d658d881b2f59364d04ef4ccba5d94619a63a1e2110e8eb656915b356be0dbfe503ee9722f2d7f96e975f3a88bec93b4dc9b501b39bfb7b2733e53f4bcce6ba0418ddcd32f27c467ced2b11ba5ce95543115f337741c04f9483c4cb132c6de0527a94e29c36c210756f3cc61f91822b9d78b0e1985a1c7c6c7438483246f53391ca5d89a686daad94e7089ece2b0d1bb913ad5dadb2cc1d39df7eaed5e1edf19da6b48f5431a44a8676cab479df3791ab96fd34cc36fa87da8b28e3590a99ebb66f500e9e6c7f3d370424952f6579786e2c88b55732acdc1db4993edf9327246c08d840966338def2f30180f86a7b5731a7dfea365d3a71e6aebb970a76ba3a41bdba360a25ed4f6dd9de60d2b2d470e363e1079d3484fea1274b2d3160cf761153f0c2099b3ea952aa51c998fa2e126c8e08edb78e10a0867420c9ebb7ea163609eaeef3f5381c3123c7849c4ac8be86d12d1e2b2c13fc336f2fe0628a8d95e6238b3e639caff5bed70891d7005cb08459243588570492927ae5ebd2f7b92adf07273bbc0af158b1a0ea15d2d4c08e33c5eedb9c6fb822a684ebd64abc4d6abc3804e3774dc94fae621fedda3a0e70ddb01784e250ca0fd14a495d6ee1a48814ef9cd78756ccca6b8ee1f1f0b11da472d1aa29f19eddae66719ac8014b8c6fb43c0f30ca512df1916d2ee6515e23ac94ab9842062be3f3b1b1a6ee7642ab52ecb95ee396beb506ffb87e4fb45ed8c82b52df2d4689278fcbccd01843a619d3961cadf1a3444a8c63ec66fc0fbf5a0995708296438b091996b64ebdc03a0cdb6b9c24221bd813d621ec52a57138155af9526370b97a439402cb1abc111f1c46241459484d746260f122bbfb964bd0a73c1031ac4f5c88155ed48a5f4fe4c041c472f0473850406329f1a56e9a9c2306e49408eac7a786288c96d025e2b99ec4a7018311ce08a6250fd1a6a6233411808c1b6b7c25379d6dc3633d230a481a50fb6292b3cbb4614f6f1e0068eef10d31f0c5d1252193d3294ea3c72438e5e4bf7ed06b40b0dc3c72957f1058e30e5745735189bce3867e57c1100c04c83f5fc143492afc73aa666a7a8c6610cdbdd446f9d9ee2b2a91368f9218abc75a5e3a8f378b616d89b5c65e93f051ff8dcd1e87f01ed1f524402068410d1b369f26d3c6126db119097c69fc0c984737283b814e733b865a7f4649fa84ed835d2c2b626718b3987da6a6b9b16de13bed7ef59fffba051bf67cc26303883c5fed6c55b1f20b3ce23b477e05dacfb09e23597e072ccfcd60a7d548f0c6e75abb911684b26900cf730cd00fc3b74c542b7c60ab7825a5c42fae3de204e9842fb20930b0d9f7a40749df18d53d5c34dbf5043356f8aeba1fa82b0ac05703ba54f9d360a82bdc4928019d3022fc84da28b9aa09097428755dac07b078fed2f781455b152069137d783500fabcc61cc9d0fdd63ec6b02d716ade1d4d4dba47a4c3d9d4f27245e93686a17581e75ba20e741aac7867f2bd60d1b552fc67643cd02eb8533b0a2cc2b40f4f9c564231b1c56fe37c94c2d36861aabfb734ed701bbda386bd79c39e7df7d21f1d19345d49b2f32d47bbf4f39dc9e7e0df06ce36857e3df98f9398c9261c67f6bf3ac75ed6efef385f9cb66f47628dc325c640979c910e7e6e5d664962b8f3ff7c8ff92f22b33a002cc93befbbcb74403c772393c68267103c8b8cf19c3a0f0c6d229042f61c302b585501581617d5b3992b90ea8c20bf2b44f8f3a8bd11aa66d07b5b3370f56fb3947f93af10704212d944b65b791baa5e9c6397de2b29f86f7a00669dfea49e27788f26b0e52ed8f46a38981a998ff703f82e5927ab90142e99c1be8d2955b53cb8d60fa446bf17bbd3095510aa45d59853926d17719dcc22762f28da09abe087ab61924fa0244dbc3322c4aa02d1d174bbbbe48426b18c9733619b57fa9823c4447b5e1a8857e60d39ae4fb3ff526eca8795f6842b193b457a84cd2cca75d03d875cb210c944ee5d2b0f5b2f9fd40b25c776707c71b51396cca2204c9434e84596a9dea4cc9e4f5e6ec2d9e3a41036973c582b92f86f53e1e6d320d4f1b7ce548f221b7caba155f5893f9593db326c2d87be06f353430a10fb17317baa4cced274b2f010788a72523c297c121adba0f0da1921fcbfdfe35ef2d9087d97dd4726bf37dbcd73ef49a6ad5c0540222e66a76839592e54fc78b80d3f75e44f65850b375f16f7d1cb383f296a18b2477e5f989d60f1dbfd7ec0b4fc05f5d9eac2ff7fa15d16858cdf49c3d2ef1e0bd18af14baccbcab5cd28594eb6eff8e163e3dfb7b3727c11f5818f99e4711be30cbe71f8c6b6c137511f095b8f2109e1c2637d0b42ef98b3e4fcde8e41d1f90a0cf92e3378818974d4c8947aa37d411cf50fc777ba8a59e8ee1c64dadbba224bfa47bba5cf6a385cacaebd5c67a3201396a73d8e43214bb96ce05032f8b509a6433fb15de827eb319903981530408e6c83ca6acbca4e1d4e65e1062fe74baede1cb8bb2d2fdb0c62d97c79fed23548aed554ebddba05f8ddc824201fd6167cdefffeed73a24c2977f772fbb6c94daf0b6c5249befc79916f363aa011e3ae29f204fe90c9f43b07d4198c2218ba749d99b7a721e4082100025c4f8199f9a2617ef595218bd3392b31bf854ec3d4397d1cb07fb279dac38cbfe4961cb3875efa82615ae7c7d60caa27b219a0296b930e4538b1eb3adec66b07e678daec64e431b427a80bc0adb0070a41b12f44bd6abbf2b5ed80c9951ad129992284c79d781743eec6847323af1e70aa6ab3984c77021cd41e1c00111d84c0a482abf70aa7571f760571b51449b566d29835cab7b5e1d42c137d38aa9a38a4867760c3149b702e408ee032423aca8f038987d2d207884302f50e51c70e8fd8f118cae8c1ac18fcbf1bfc1835e5a8f14d2c1616f2f6eb6e86be437c95cdc8d5194d7884e65ee17a3dc88fc16cf36cf4b2305b9b291519c43ec3d1158cf45b806e9bde6e323696b87568a80bfd3a2dbfe23f9e7473021ff95c3cbbe0c3bf069f20f92bec1fe9899f3b17171aa333e1d1ac6d5e29f2fd3339f7e6662f26fd047be2ea58d983845555b3885a889bd0a25876a72dc6f26ace1c871717ad1db43583d99b850223db768d7db7392d956fc09e51f2714ba786598b27be7e37f59fb114022a049819685a0ecb5616d2b6d254e5efadee3b1814992982e300c4a4acfdaa63a116779cb0cfeedd4a46e5ba241f1d7d1af2143065a8653e17f69acc9c23a8ab6854538cf443829ace9addcc0f5b3c77ae75228bf1cfbfa3fc9a4f39719f05d19d5f0ecc0cad3eae381c3b9480ff51e8a162a8d574cb6544a8944a1f8a41d2d5c86032d6d7e3368cf9e100f0995724fce89aa0938ae57c1d51365211f617e5e4125f648aefe11ff849a05e2ced26fe121cbfe539cee4e5f174d6138444a3281c4c7f31c81cff483898b05a5a3ec12df80503035e212e0cfce56c62a99be2fea7f841277953d9b3a1a8a2fae638e5e509185f594b90e8270d202103f1121fb5347eb5f89a9218cae61f8644449fb7632da253603b27ad92b0b680f5a921ea4b5eba8a432f49c8c0c18ea3ae74abb74f5b92f5d3e258a385dc6e13dc009b5db84001d28f8c47a9972bb28b2a49db0cce035f0090da9f012790a6cebbeb40c00fcf23958fd9e31135b525b1ae88fee871ae175816c4bdd0c9521b70b6c5dd2585c95964773445931bf424dad684da09555c5dab323a5f1af62b8b4bb81f7062584db7c16c5cac87948809696c37cae76501fa29526b765e77de4bb6461be5c2304b8a9196441b4922be81464316f139556867e7a856e1e13e0c09ae4d5eb5bf3fb9d6634549f4d9936594e1699cd75bd53e366cc439995d35f05d8966a9ecd806ee35047f42c530234e244ad447d2f3cc128298a8f5dddc10b14c3ebd41591baa5d768bd6f4807d511b1b3f1cc64b8a50f28c817caded665fe7e93bb162ba3f80dae09519af68e6213d158bb94bd129bfaab14d8a15e5c2c145a9ea80c9faef0ef817f719f9349ddc7db789858e4026afbdad6ebd94731c9418c5ea565b76995c22c49ef4c7949cbe1399012aeae4faa290bb6da4dcdcaad123eacf9762b872b4bdb0a138268dd1b5b4c65907b77aacea06c2ea5d5e1c6c2b911248a2edd6d0c8f25108f55f18a50cbfea874ac71b37bae1ae23771b1f808dcb52db55cd68c40f1dc8aabe704a186e27fd1a9ee6a5daac185486f6c02f60f6e4abf7036fb4bd4fe78daaf7b42aa9457fa0bbb653d0eaea239e1a3e4e27bb31981437cf18eb0b100881c460c5e51604b9719698ec127713af6089d9f8129d6a36877de8b8a94a225933a3fac0879117f88ae411fa48af48a93a39d0ba978fe3516e198cdb5b866e2e50b9e82c3ea0a8d0dbfe3f10816e0cb14b782231a6c75e830ead22a7788b856a37e08e076d33ee22cc745f0202c5f4ff1898714d7b1a791c377501c6389d3aa4634af9ec8663d683bf1509627f768603ce518bc737b5725c73724458777a7c1d9c42b4407f42214142c0d191d6587ee05a67cda33", 0x1000}], 0x2, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x1, 0x79, 0x3ff, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @authinfo={0x18, 0x84, 0x6, {0xfffffffffffffffb}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffd, 0x3, 0x10, 0x7, 0x0, 0x8, 0x100000000, 0x3b1, r4}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x101}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0xc8}, 0x4000020) 00:22:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:43 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:43 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x9) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) perf_event_open$cgroup(0x0, r2, 0x1f, 0xffffffffffffffff, 0x4a1ec068415124ff) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) [ 385.845027] device nr0 entered promiscuous mode [ 385.956112] device nr0 entered promiscuous mode 00:22:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000240)=0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) r4 = accept$packet(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x14) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r4, 0x16) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:43 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f00000000c0)=""/226, &(0x7f00000001c0)=0xe2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:22:43 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlockall(0x7) [ 386.109884] device nr0 entered promiscuous mode 00:22:43 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 386.169934] device nr0 entered promiscuous mode 00:22:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x41) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x400}, &(0x7f00000001c0)=0x8) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000040)={0x10000, "56845cf059daa6413e1dc94cc411572bc54cd485ffe3fac99c9aa6176d487876", 0x3, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:44 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlockall(0x7) [ 386.342704] device nr0 entered promiscuous mode [ 386.404967] device nr0 entered promiscuous mode 00:22:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) write$apparmor_current(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7065726d70726f66696c65205e275dbc7472757374656470707030626465766d696d655f747970655e657468302f29706f7369785f61636c5f6163636573732f776c616e3076626f786e6574306b657972696e6726253a2ca6c3000000000000706f7369785f61636c5f61636365737300"], 0x71) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a031c2a4cdb90200000000000000c4ebf803000000314b0d081bcae24ad02e236d01bd56c62a54cc7bfd4ad9913e2f2b6f447da7afba00", "ca7b43cfe50b09a476d2e2c4bfd6ac63b08cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf00", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 00:22:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x800, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1, 0x1, 0xff) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x4, @loopback, 0x4e21, 0x2, 'none\x00', 0x8, 0x100, 0x27}, {@rand_addr=0x80, 0x4e20, 0x10000, 0x3, 0x9}}, 0x44) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/316], 0xfdef) 00:22:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x208}, 0x4000000) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) 00:22:44 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = msgget(0x1, 0xb557a8a449486c1c) msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x2, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 00:22:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xfffffd50, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:44 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 386.671775] device nr0 entered promiscuous mode [ 386.754061] device nr0 entered promiscuous mode 00:22:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 00:22:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000003040), 0x4000000000003c4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r3}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x9, 0x0, 0x9, 0x9]}, 0xc) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 386.868715] device nr0 entered promiscuous mode [ 386.941602] audit: type=1400 audit(1568938964.672:68): avc: denied { setopt } for pid=22330 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 00:22:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) 00:22:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x0, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0xc05, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10102, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00') mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000008) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r6, &(0x7f0000000180)='./file0/file0\x00') renameat2(r6, &(0x7f0000000100)='./file0/file0\x00', r6, &(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2000) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x8004, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r9, &(0x7f0000003040), 0x4000000000003c4, 0x0) r10 = accept(r9, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r12, &(0x7f0000000180)='./file0/file0\x00') renameat2(r12, &(0x7f0000000100)='./file0/file0\x00', r12, &(0x7f0000000000)='./file0\x00', 0x0) r13 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r13, &(0x7f0000000180)='./file0/file0\x00') renameat2(r13, &(0x7f0000000100)='./file0/file0\x00', r13, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc5c1ca5f45e6c029}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x8c, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:44 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="100000000000000066ddf630f7627401ab791c4325a292d1c9c52ebc0c21d9aa12fd3ddb"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0xd00aee9962d966a9, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) 00:22:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) [ 387.217672] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.237314] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.244176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.267378] bridge0: port 1(bridge_slave_0) entered disabled state 00:22:45 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) socket$kcm(0x29, 0x2, 0x0) open_by_handle_at(r2, &(0x7f00000004c0)={0x1008, 0x5, "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"}, 0x220c00) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:45 executing program 4: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) lseek(r0, 0x0, 0x3) 00:22:45 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:45 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:22:45 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000c40)) ioctl$TIOCGSID(r1, 0x5429, 0x0) geteuid() fstat(r2, &(0x7f0000001100)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000004f40)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) getegid() read(r0, &(0x7f0000000000)=""/17, 0xfffffcd6) [ 387.718038] device nr0 entered promiscuous mode 00:22:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) openat(r1, &(0x7f0000000240)='./file0\x00', 0x101402, 0x40) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000001c0)={0x2}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0xfffffffffffff19f) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="72eb77e0d3f27e8a133d857991bc6354cddd5f3e"], 0xfdef) 00:22:45 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 387.975539] device nr0 entered promiscuous mode 00:22:45 executing program 4: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}], 0x1}, 0x0) 00:22:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x4005}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x146, 0x400) getsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:22:45 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x80000001, 0x9}) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:46 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000095000000000000007979df6c271e7f1efccdfd9747b99408ce2cc06a82d30597daa8c9c300e50028f3dc00c4d9cf2df955f9068aaf28966d6fc703405c59de51b6f916a50805d9fdfbeb8209c711b97009000000b7ef02dc7c0d30015955348a37a31e211085ad465217f6ce123979a83a134160b3f98972a0a680a6d70bfaca40d962a28ae10505a52c19f4c2edcd5fd49ef4805593ecc2303aac0010000000"], &(0x7f0000000180)='GPL\x00u\xf1\x85y*_\xb2\xf0S\xfe\x8e\xdfj\a\x19\v\xc2\x8c\x891\xf9D\xe1\x13\xc4)W\xd1}3\x9d\x10\xad\ac\xdc\x81\xe2\xa9\x8d\xdf\x98u1\xc1\xc5\xa8\xe7\xd4[\xb7\xfa\xd3Z\x9a\xa4\xd6\x8e@\x1f\xdc\xa1\xf0e\x9b\xed.\xbf\xd2\xc2\xcdg\x9fvt\",\xe1[\xb1u\xc2f.j\x84qg(h\xba\xe0\x1a[\x11o\xf7\x7f\x05]\x1c1\x9dL(n\xce\xeb\vvRa\xb2\xd1f\x1b3\xe6Xy\x10e\xe8\xb2\xbf\xc0\xce\x7f\xfa\xaf\xe9mt2\xa8PA\x88\xf8\xff\xff\xffL\xfc\x16\xf1\x9b\xe96\x10K\x02\xee\xb2=\xd2[\xca\x0f\xd4\x10ML,\x9cJ\x88(_\xf3\xfa\xd2\xdd\xac\x18\x94>\x1f\x17\xc0\xabg;e\xa1qf\xcds\x8a\xa6\"\x9b\x97\xa5\xe2c\"G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae\xee\x8d\xbc\xd3\x93*\x1e,\xcd\f\x1d+U;\xb1\xbf8\x1b\xb4\xbc\x19_W\x84a;\x0e\x8flu\xd8\xc7\xa0_\"\xba\xa5Y\xaau\x91Br\xe2\b\x94\x1f\xcb)m*\xf6\xc5h\xb99\x0e\x93D\xb1\xfa\xadI\x1e\xdbt%C\xcdQ9t\xa2X\x9bM\x18\x86\x02\xd5cr`o\xd0ky\xea|\xd0\xbfz\xeb\x8d5B\xdc\"d\x87\xe4H{/\xbdA\x16\xd8\xf1t~\xa2\xc9\x1e\xe9T7\r9\b\xbc\xdb\x8a\xd15(\x1e\x99!\x9e)\x8eQ\xc4\\\x03\xfe\x14\xa0', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:22:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:46 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x8000000005, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x260900, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000140)) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) setresuid(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) setresuid(r7, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x2}, [{0x2, 0x4, r2}, {0x2, 0x4, r3}, {0x2, 0x1, r5}, {0x2, 0x7, r7}, {0x2, 0x4, 0xffffffffffffffff}], {0x4, 0x5}, [{0x8, 0x835a971757aa6b48, r8}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x0, r9}], {0x10, 0x2}, {0x20, 0x4}}, 0x64, 0x3) [ 388.571629] device nr0 entered promiscuous mode 00:22:46 executing program 4: unshare(0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r1, &(0x7f0000001380), 0x0, 0x0) connect$netlink(r1, &(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x20}, 0xfffffe70) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) [ 388.678028] device nr0 entered promiscuous mode 00:22:46 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x28000, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bridge0\x00', 0x400}) 00:22:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7e) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30208}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r3, 0x102, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 388.849068] device nr0 entered promiscuous mode [ 388.927201] device nr0 entered promiscuous mode 00:22:47 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0xa0000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x9}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:47 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:47 executing program 4: unshare(0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r1, &(0x7f0000001380), 0x0, 0x0) connect$netlink(r1, &(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x20}, 0xfffffe70) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) 00:22:47 executing program 3: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x1ca381, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b4f5de9de1d21c"], 0x5) 00:22:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 389.481304] device nr0 entered promiscuous mode 00:22:47 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x280000, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) write$selinux_access(r2, &(0x7f0000000380)={'system_u:object_r:dhcpc_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x3}, 0x46) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000080)) recvmsg$kcm(r0, 0x0, 0x0) r4 = shmget(0x1, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$IPC_RMID(r4, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r5, &(0x7f0000000180)='./file0/file0\x00') renameat2(r5, &(0x7f0000000100)='./file0/file0\x00', r5, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000100)="46aa32e38ef73b2cd53aa00d60fce20cb235bb0a00c31f64ab8d5845db4eeea137ca1ee90a247b533395d7823ecb39b3f6609b13078fb3f4729f4e2e117b46b6ae3077b7c3e6a2374a366c86c427c324b6391b347e9623556a5363ad1c4dfd0c4c755bae6ce15b0d3280c139a74fba71c5a327375e4f4f76cca7179b5fe848c52b7f6c51078e05194276a4064f2769b48891d92ac56ad937d100875048b6ddb54ac5108a9f4dc64ce0c808ef44e8de7a", &(0x7f0000000280)="cdff22f34667f0abb404e792f92d8a7d10753eaa5805b004bbf83a", 0x4}, 0x20) 00:22:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/softnet_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 00:22:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x2, 0x0, "d5ee78ea5448f0767dda2973ebe7c5254d4edb502b47b192cbfb336ba3eb119558c7c6aeafffbff418dc6b04466b0deabd6c8f225615c112bbcc803cf526217ae957dead4e678c8f40484bdd2379ab3d"}, 0xd8) 00:22:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000003040), 0x4000000000003c4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0xc000400a}) 00:22:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getrusage(0xffffffffffffffff, &(0x7f00000001c0)) [ 389.728294] device nr0 entered promiscuous mode 00:22:47 executing program 4: creat(&(0x7f0000000040)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 00:22:47 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 389.806078] device nr0 entered promiscuous mode 00:22:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000000f26707d245dc93f2f3973a7263ed206c45a2ec033689f3fd5e7cde3ec58e336c24b2d39d2d37c766aea47e2facd22ef557695ddda8ddb9b7a754e8c02948156dfd760569eb6a8d6c416d3ee1fbe745c245a0c3a9ff07fa16ee1f4a80a2cd320455feac436add9c7b892229963a490a8f27e8e919a21076fd956a66c5345448772d5d"], 0xfdef) 00:22:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 389.985494] device nr0 entered promiscuous mode [ 390.012521] device nr0 entered promiscuous mode [ 390.045503] device nr0 entered promiscuous mode 00:22:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 390.078336] device nr0 entered promiscuous mode 00:22:47 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 390.185255] device nr0 entered promiscuous mode [ 390.259088] device nr0 entered promiscuous mode 00:22:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$alg(0x26, 0x5, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) 00:22:48 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:48 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) 00:22:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x242200, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) 00:22:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/\xf3Gt/t\x91n\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000003040), 0x4000000000003c4, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000040)='ipddp0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) 00:22:48 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:48 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e2, &(0x7f0000000140)) 00:22:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000040)={@initdev}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) 00:22:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000040)={@initdev}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) 00:22:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000c1af0c122ab392fbf16f55ed90dc09ab267376f73643e47edf062580a4c285b1f8aeebb9a2904f12ffbcdb99c8a89fb5ba01793b1ca4b3d7578792a6e0f232422831c6114f92e44d6b3d35fdb66fef0949096a2929049eb80bf47d3cbb2efe6d6ce6f11396590809b50173269c68f8a9eeecbbfd020c1b0fce2dbec99c3b5994da76a69924a285e108be93624877c607f55a476baaddf9fc4ae12e7c3ff29995516b67011edd768b3debc2cd0867ac312faa693586b7b5a97250144470", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000580)={r5, 0x8001}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000017c0)={r4, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="70010000", @ANYRES16=r6, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x5764d6baec76349f}, 0xc000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r4, 0x10000}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000040)={@initdev}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) 00:22:49 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) recvmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/185, 0xb9}], 0x5}, 0x4040) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f00000014c0)=0x800) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:49 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x5, 0x9, 0x3, 0x3}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063a8dd20"], 0xfdef) 00:22:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 00:22:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(0x0, 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:49 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:49 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 391.634390] device nr0 entered promiscuous mode 00:22:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x110) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00\xec-\vlo\xdcdb\x15\xf1C\x066\x95\xc3\x89\xeb\x83{\xd4WA\no\xc0S\xe0\x82\x80eUq\x83\xc2\xcd\x9e\x9a@3\xcbKyJ\xf8|\xe6lk\x84Z~\xafY\x86#3\xdf\xedX.\xae\xa1\x1a&.\xbf\x12\xf4\x94O\x19Vaws<\x10v2\xda\xb0\"\xff\x96\xa4K&\xcf{(\xff/\xf0_\xe6\xc2\b\xaa\'\xc5W\x16\x94\x1f\xf1f\x17\xa2u\xfc\xc0gjl=:\xc5\xb5\xee\xc8\x80\xce5\xfc\xca7\xad@{x<\xac\x03\xcc\x12NH\xdbzq\x84\xa3\xab\x19{\xd5\xf9NscA\xa8f\x1d\x8d\x14\xcf\xbf\xce\x90\x8a7\xcb\xc2\xc6\xee\x85\xabZ\x97\xdd\xff\x03%\xcd\xb8\xf9\x12\xb5\xf7', 0xb7) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 391.717157] device nr0 entered promiscuous mode 00:22:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x100, 0x800) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) sendmsg$kcm(r1, 0x0, 0xd0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) name_to_handle_at(r3, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)={0x51, 0x8000, "0269d09ce56447d1314c392d319087115dd1739edbaf96ec8dd397b621c6224a0e5dbfb88ac6d1a7be5bbb90b33ad2ada36d1e72e339b42e62499766b24b5cb1f0d76dd17e17e2bbc9"}, &(0x7f00000003c0), 0x1600) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) write$UHID_DESTROY(r5, &(0x7f0000000040), 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x10200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000180)=@routing={0x2c, 0x8, 0x2, 0x6, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty]}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5cb2cbcd6cab8420110106d31200638add20"], 0xfdef) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 00:22:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x110) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00\xec-\vlo\xdcdb\x15\xf1C\x066\x95\xc3\x89\xeb\x83{\xd4WA\no\xc0S\xe0\x82\x80eUq\x83\xc2\xcd\x9e\x9a@3\xcbKyJ\xf8|\xe6lk\x84Z~\xafY\x86#3\xdf\xedX.\xae\xa1\x1a&.\xbf\x12\xf4\x94O\x19Vaws<\x10v2\xda\xb0\"\xff\x96\xa4K&\xcf{(\xff/\xf0_\xe6\xc2\b\xaa\'\xc5W\x16\x94\x1f\xf1f\x17\xa2u\xfc\xc0gjl=:\xc5\xb5\xee\xc8\x80\xce5\xfc\xca7\xad@{x<\xac\x03\xcc\x12NH\xdbzq\x84\xa3\xab\x19{\xd5\xf9NscA\xa8f\x1d\x8d\x14\xcf\xbf\xce\x90\x8a7\xcb\xc2\xc6\xee\x85\xabZ\x97\xdd\xff\x03%\xcd\xb8\xf9\x12\xb5\xf7', 0xb7) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 391.907416] device nr0 entered promiscuous mode 00:22:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000014c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x38, 0x2, [{0x30, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}]}}]}, 0x54}}, 0x0) 00:22:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(0x0, 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 391.995619] device nr0 entered promiscuous mode 00:22:49 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 00:22:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x223, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 00:22:49 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0dea86dd20e44a50e637d9773a0f4999cb675bc50c1e0ebb8521776f894b1416032d4793be60b46c74f53ca122d718774defcb97f6dc819c64"], 0xfdef) 00:22:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r2}) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000017c0)={r6, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x6, 0x1, 0x2, 0x7}, &(0x7f0000000080)=0x98) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(0x0, 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 392.276506] device nr0 entered promiscuous mode 00:22:50 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) [ 392.349524] device nr0 entered promiscuous mode 00:22:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0xc8800) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0xc0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 392.466911] device nr0 entered promiscuous mode [ 392.515487] device nr0 entered promiscuous mode 00:22:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:50 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2171, 0xc0000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 392.639890] device nr0 entered promiscuous mode [ 392.695843] device nr0 entered promiscuous mode 00:22:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000180)=@sha1={0x1, "573cebc7a6c26d812cef45a1d0a09e04794d162e"}, 0x15, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 392.806027] device nr0 entered promiscuous mode [ 392.845143] device nr0 entered promiscuous mode 00:22:50 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x5490e2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="005786dd20"], 0xfdef) 00:22:50 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x501000, 0x20) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r3}) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00') mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000000080)={0x8001, 0x7, 0x4}) 00:22:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000)=r2) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000003c0)={0x8, 0x0, 0x2, 0x7fff, 0x7ff, 0xa29b, 0x8, 0x81}, &(0x7f0000000400)=0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x5, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x4, {0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, [], 0x23}, 0x100000000}, r5}}, 0x38) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) 00:22:50 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x310040, 0x0) 00:22:50 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a73ff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x5b94, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x30) 00:22:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe71) 00:22:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x145600, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 393.383236] device nr0 entered promiscuous mode 00:22:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev, 0x2}, 0x20) close(r0) 00:22:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x4005}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @empty, 0x0}, &(0x7f0000000080)=0xc) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x2, 0x3ff, 0x0, 0x40}, 0x4, 0x2, 0x0, 0x0, "fb283e473f41246b"}, 0x10}, 0x1, 0x0, 0x0, 0x20}, 0x800) [ 393.459122] device nr0 entered promiscuous mode 00:22:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000014c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x38, 0x2, [{0x4, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}]}}]}, 0x54}}, 0x0) 00:22:51 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="006386dd202369ac60e3c5f73f6bc77afcca6493651ec14af5b0cf2155c1745b4b65f3ccc55188bf8e043939c5d1d54717a20e762e6f0d42190b72a7dfbc13fef1f59d4da3d83e9d88dda0127ea0155fdb3122e744c4def9643cf83ec461b14995ceba36fdc28ecdac3254e2f0aacc6c9bb122de663eb7a5bb6bb2b8df1b867fe4ca9d70be5c12a9e02ed3427cae68918a5204ae23504a36223a7b3b21f71fad5ccb44ea7c"], 0xfdef) [ 393.627676] device nr0 entered promiscuous mode [ 393.685218] device nr0 entered promiscuous mode 00:22:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x88, 0x80, 0x0, 0x1a8) 00:22:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x5, [@broadcast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @empty]}) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x6, 0x8001, 0x1, 0x8001, 0x5, 0x4}) 00:22:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0045520, &(0x7f0000000000)) 00:22:51 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:51 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) kcmp(r1, r2, 0x0, r3, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r5 = getpgrp(0x0) r6 = getpgrp(0x0) r7 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) kcmp(r5, r6, 0x0, r7, 0xffffffffffffffff) socket(0x2, 0x80802, 0x0) r8 = epoll_create1(0x0) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xff66) 00:22:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x2bf) sendto$inet(r0, &(0x7f0000000300)='\f', 0x1, 0x11, 0x0, 0x0) 00:22:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x11, "000001003f000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 00:22:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x2bf) sendto$inet(r0, &(0x7f0000000300)='\f', 0x1, 0x11, 0x0, 0x0) 00:22:52 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x39, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'gre0\x00', 0x2000}) 00:22:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) ioctl$TIOCSIG(r0, 0x40045436, 0x32) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)='f', 0x1, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x10e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x3}) 00:22:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nK\xfdmC\xce\x00', 0x1000}) 00:22:52 executing program 3: unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4020ae76, &(0x7f0000000200)={0x5}) 00:22:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) 00:22:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x5b3d87043e2d9859, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000003040), 0x4000000000003c4, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a922ac7", 0xb2) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$revoke(0x3, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003040), 0x4000000000003c4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x7f, 0x1f, 0x7fff, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000003040), 0x4000000000003c4, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:52 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:52 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x3e5bf49e9258bcd6, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000200)=0x5e0729ee) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x90, 0x3}}, 0x14) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xaa6db2a1073d8077, &(0x7f0000000000)=""/99, &(0x7f0000000080)=0x63) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) close(r0) 00:22:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:52 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000280)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xb8}, 0x0) 00:22:52 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) close(r0) 00:22:52 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20006}]}) 00:22:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) close(r0) 00:22:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) close(r0) [ 395.255785] audit: type=1326 audit(1568938972.982:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=22885 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c84a code=0x0 00:22:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) 00:22:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) 00:22:53 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) 00:22:53 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:53 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) 00:22:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$KVM_NMI(r1, 0xae9a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x400}) 00:22:53 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) userfaultfd(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x98f}) listxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/112, 0x70) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) setresuid(r5, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, r3, r5) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000300)=0xe8) setresuid(r3, r6, r8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:53 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) 00:22:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000240)="76fd0ba8a34e00000000009801dc4953d4d37807e705ebe1d64024b2ad6616a7b8a155f8d83f8c3c8d2d418f72fa4811a6d1bc46a84c54827af1f35d0500143160fc7397e6d939ddcde6ad4104db8c5f894881cbedadd86ab4e3c611e9c32c", 0xfffffffffffffd80, 0x0, 0x0, 0x0) 00:22:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) [ 396.066086] audit: type=1326 audit(1568938973.792:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=22885 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c84a code=0x0 00:22:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4005}) 00:22:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) 00:22:53 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) 00:22:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8, &(0x7f0000000040)=""/190) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140), 0x10) 00:22:54 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x161) 00:22:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:54 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') gettid() sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa8, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xad}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) 00:22:54 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) 00:22:54 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:54 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x86080, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) setresuid(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) setresuid(r6, 0xffffffffffffffff, 0x0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x8, &(0x7f00000026c0)=[{&(0x7f0000000200)="77ac67542b15bc422e25e23c30188e355bbe9ddd278dfcee6b8777fad67677346caa055a09514734dad48742a815b6a68441edf97b28e470aac33f96a8faf75754fd30ec1a66831d4175639504cc74a065b68c837637130f27ba8368ba1d996fd7e97204bb036b4d87b1ac8b9ca7933370f97d4751a00c81a8776f97f967367e86943e3fd4bfda0a4d26e6ff280c40807e52d346cd3d822302e3c2d0e034004ce811f84fab98029beaf74fca1d4763ff708ebabcaa84d0ecbee1cd73a38239e5b7968b01", 0xc4, 0xd12}, {&(0x7f0000000100)="d93380e5cdb2907fda163a160689f279a4e91960a6da6ca25c613e4e99387ca11120b0aa92f35988375a4688b53b8a4041b986d13c1a9ef756a2560f2da5364f6f651233d9c38359ad7c2cb4bc5933620b8b759cadc4d0075c68c77b89ec45c2d95f59425f3cd51b936dc6e7", 0x6c, 0x7}, {&(0x7f00000004c0)="9fd8f1075644dd18d0a885b547b1f0a07e7789749fc3681eb63654ac62d904c34f929db073d30e97ecabd53ba77a98d1144579076bcaccde27f24247c2a976685c792fc5dcc0210cb05de748fde6c4270a92f80b83bdec93b2d017c730e045e5cb1aba9d2af496d004c95526f4e462e819c5ee82d24c37c5b42e48c09e5369de884bf82517518b0d4e73c1ba61b1861a88001f601014406049cce3a8236b0174ecb4d37b588e67d2096b17105842817ab15c6cd11f5e7096ca28caf0f00993335443a33b1de56ed20445855f75ec75ba41d68e6a8808cf5ca766c2e81664fe98baf739d6cd2754610186aa5819378b930a032015591c0365694501420fe3988175c6d0473a53c090b0d9c10351f87158bd8ecaa6bbb688f5dde490f3130c299d07d3a39f30e1f28d01f2666d3a9835c3612cba2aad613f950ee6824cb3dce642d76e4fca4ea0a5a066699b58fe682db75656f458aa4d6be44b4606e23f553ac258f6ad5f8ea0fe61f748d5e33cd046fc724e91f2b13a1b50546c8473bf63bc4c5a1d81f1ee1fd4e97240caef54d1c3635bd09c993199fa027de66c29f1e0371b58c8d4df3a1a62674749f4f0e9a3e95347338111fe7c914a94da4b4b11a42a9373000804d3ba4868e594451253ef7a22ee10ee280c0aa44f9f78e807985aa40c454380e57b29dc44d524c12ec24ae5e3666c88b8b0e4616b688b7823fc0250ec3ae56fc372bb5a51ffa2c1a2532f934213691f597e94994846eb6301440b7f4294d82cc2fd5e0d9823821ae062781e5c77cb56fd4dac0ea64a5a25c978c50dd17026fdc2871628ba1efa2c4425133529a213446a5dbc668daa0c1923236360cd90475d4b9d87653b8cd1fc4d9330f5b93ae16a4c22f6beb4974cf437bd4194958f0fff04c6bfd107fc2aa82ced5735d091d324ecbcbbfdfbdbb4878c99ca3920dc8b96795a53a5aa60642e6a0fb60741ad50d3579c26ae15375e1025d02e89b56e02d1ab05944d9514ea003f30748c44596183da510a7ffd962e55e465bdcd026de73606799817f3c260334ab81f752d0c65a391fabb892510b8cde499c3bfd29739e8e04617b66ad67f9cd0667e7c0148a6b68e21e251247aca93b2ace763e786b7a53d3eec669e8dcb4bd9eebac6c1192242b5caccbab5fee56a31456010d854b0a12424a10e0f2cf4b33f00045918d4903c56de8a7c92ff203c3b27be95abef725a7ebd1d4d16666c0f6b1c94bb1e5c5bee1902267d421f1dc40f59bccefd8cdd819b2e1484c0a7feb92ed0f204f6c2493aad660654dfee7e775c09d4990c3fe19d738c625c6365770d85f5c6829076d1e440c6c538f0f167476ebf4a785f385baf62f79b87a65d0c424df6172bfb0300f583e621e5a102995dbfa2edc0e661da5271fa25f4f13d611da9b5292029d30a80689f739a94d92f8a242af03acdf5e045ddac5c22d06e05a9b68883170606194be65dd8624b4521cbad759011ef0251aa8a486a4b37b9c0dce6a2260952f875dfb148e23c061676d2e43392c60c049908bedea61090dabf132d7c2a447645dd685108860c769ba418af4150f093fd4453ae1139dc7b35c1c3906bba00a9140eccd91257669302c96d53779cd64ff6881deb7710bea1c53afd2787781945c9e3dace483dbacf1bcdc731f4ddc4741cbf0bc2c38fc073d91ac29d6f3ffd3b1f834bfb2ff3ef06707e9a30e9569413d7d41d81c82c01c5c2edb4da9fb503b341a3a8d258b6501ff25144008e8aadba0b0204bc42b728e1ccaac64b17d8be52ba86c70f2df821cfa6c5eeb674ef4afcb56983dbbb441efbf9089999da3231e81ec938e1035a715a2f7f2a7ae511388509d7c5507aaa6d77364560fc2102d46b51852bfb95c867e1650ea441a36f2977392e7b584a60d5fe6749c08b03a9bfd271a72b027968cb2149a7a4adf03bfcdbb02dbdaf69bff1e2f637757e2ebe523939b3d27590635d5645c8736f78cfa28760b94c0ac679f5f45e4da25c0e3d5def72393ee7b832c5bd872f6c428797516ef56a07ff6f564ce7c3ce0cc7364df598055816ea4c3f21c0931656ea5b04eaecae7a0109197c0a55737feab7c4a474f16ec6ed1fa7466f21e286fc0e976db38f90c23ed7e6dd77f71dab8015f292816f0445af6bc2979617604306cf1fb1e4fd3358f95471895c8647b34be37df77fc0ce99a94aa0f3350f62407759e353916a43cd2b307c8a01cf6671cc2091110d3b86ff5aab71604c7011930503eae1e93645a3f7252189b9a54383b85a6bc499fc81ba961acce5f4af2ef16eea7c3d76b4b3b685d75e9c383a26f25e2c30084202f5fb131b87cc0a3604c1e5ea0f40ae548ae43d1bdfdc9b171621af169581219afc3f6b94ed02800b6a3132d6eed44962897af71c8ec9c29f7d9b5ce86dcb0d964b5dbc0f857ccce88cdc7e4d1826e0f2dc5907282329ba578256a7c2a45cadfffb7a5314607f0f0c1fe1d361539bf46b798bb2652f65e7345be0ad8487b0b37c726b918614a1ac92c4e5dd74f2b6079e2f0f0772fa830a703223e0760e1ced04807f5328476190cc05e2e43539120a5795ec1b7176a2b9f7fc171b170fe606d30deb9f84e6ccaaf321ab715aab3ecb183e8bbb9d629a42181bd7de1cdca834a3bc0cb3241e42595f6b313a2c49b5c14e650595525eeae0eeb8c88b481cad25947deb988832d0f667b9516c443d698d4bdaba4c8ec6f544407b65be06ece3abffdab5e0d2e347bd0026ba635386bff95bc97798b5f4c301e7552abd3580ada7bb09b47c71845aea0c4721484d2369a7bdc4090c25ce765fc21f015bac0c6b5f1aa6afce988c817f0020f6c61f9247e30eb947851a8e56736e5ac23de29fb18b66a4b8736a98f5226f64c823351cd91ea8e67a6b00dc60887060d1ad13c1e84f0cf746fa54b21c449e87880d3c7af8099b7f82896ca451b7034cef99a9d9ad03781e820bc2b8e6c39b7ef926b285c37696964cc286615ec4c79fa1c064ed2dadcf5eedf67e34f8b2a25b21a6fecdc0a567fbb56024ae7ac9a013b614b823c9768fe80e4f364693f9432f2f216e9bae186862a91c151333a05dd98572fd554aa4144b3565bdee126555d48168a8e8d61af1a3d2db015c9dec0184de14cf171fbb7a166091649ae9722fd9c3153972f6625a728e8cdb0ebd9411fea64d7955656c9cb9d82494f2d9ad638404ec6aedbabfeaffe4cbae7427989622d00c5ca1b4e1e04e25dc731c0f61de9f8c992bb6e91315e09cd401335a949f0ac1b090002a706a06a389f07da949144cdf1fc63aa2db2c66fe6e1d7d6d73c6f52e4bb29828f80516d397eaecb45ed6e42051ed45ce187d04d0e83b28a01b1f7b2b7eae623840e90227d2d6270ef089ad7c15b31bf4cbdddf6560f0023f69e4c53c98b41abac526e74edea8863e46ce82f8eb4dca2d210b7b0380c6d9ff8af65b4a463155a2822654012e03e1bd26c1094be01d3c2163e39f06d2c758312b802cb39d45501c79d6fe56f7f944b5fd5732be0a5e84d86e2080acb2ef4f7bd82af7640b32e7988bdf460a17beac05254d626aea8be2e3b146560566ea89361a29c9430bd94e99ba9a9fdfb7aef53228be518523921b9a0fab57e6dad1361ef6b6095cc219d85ea41dca5d0e595b1d67dbc1530fd3f9a8e7347313c85867dc6c6816a88c2b319abd81dc3596fb9ffd6d93bdbb4eddf97c37b14d9ced26406022b9992102f09ed035bd35773a80314b0f80e79e619a8781e027636d28af37af7e515a5a90d79c6a01c223daba120c46def06dd27913ad245645a970bb83f93d4293be1ba1c5fbcea63f8e87c639ac9d9b08f081fcccf5cc39187217889061a685c562caafcd4beaf1c1d0958506c00ad387a2d2b16b05f684758c5f7ba5740d55100e46762e28fb68572fcfe3f98349bf075a19d3a7e1ff01ed8962202af14c62fed3d46840d687f7fc7bbbc355fdef8ceeaa32ebf4af688a5d6c7be1134be133ac9d66553bb2d615260be84b75bba94dd07a1f9535103ab917ac56381c17f02e65810ecc65396644a10c98a7bb311440f06d021279e6f084bc66a7e30a2237938f63c917ef91db5c85d6290f0a35a23ec146334db9d9b1e5165a0a786edbc5eb1941982e61c4f7ebe7caed5ea55881c4cb307920cb7a779668c092f73780800dd31fb885113ba5296d18405ba737581426b30f08e694144baa0f76c3efd9c8bd17346e305f0435b53b3f44eeaf9e512f3242787dcac216c7d1273186874629ef99c33a87cc26cb1d6cc36a0701e4badbd809f994415c4907e45bb095bcf90e3f1a51a14a294a632555efb76501e8170d6c49b4f2a561396a96034d831b862870b8a148773c11293e88b3637525c94839656aa8c4d91420f695d2bdd89af193d4443485517ccd9b1aff22c314e4213c3e91d06c9aaf49ebac9ba6738331f24b3e0a3379dc6112a08b249b1d56d83c4af6e415875b328aa186b46bb1fa46282b59471e084d26177eceaf736964d48c42a1ac6d516c280aac2c5ffa9345c682c4e9da73bda4516537f9729d568d9735ed14ca8e6d967f8e7257760906679b085a11ad48b500a7b7c9d281224af7f43be848a5b69509b7e1e55d19a968f4265f1da2898cd3501934c4d8eaabe14492ce241a5c6c3c4d35f07c11c6dc7fee013f264e9af3abbf8f0f0388956b21e9425a94172f9c4e6d40f5837c976d7747c6a76ddd7036f9813d8f53fb3b2c895443265aaf138b53b37d33969ecbe72f09e9321e5947ace1d6edd57c772565b6b75ce3b09a2e5e082d337cce89a46242ee0531843b116539ac703740e8285769c980217e3ae83c1f6d8bc99dfdf79f7d31a2ba70f6944b6ac30d08a0c7919db727b6ef76fcd366b43e5d61d0957a05ac867bc5bba723bb39b6a58e4f4d39f7a14e77dbc3b557dd86378a42e9f35f1a8061afcec87d7893a55d275aebf82e9f19119c3d461c57e1956fda589ce02c8c9ab8d2ba26028a3de5f7cdafcdcc2706080d4da723e8d303ad9eca91cb2c987da319c413dbf73914f14e89db19ea290738272559534c01a9fc9253a45bad980c2f11c20a17ab4c9eccae7276abbfbbdc5b27e618d79f20e9b4c344535624226cb2119b6d15f3734d131fda4950026135ee31eda40ef6634040223336dc60d2d5fa72b06a23cbecd0a9317796a124795bc844d61d3ff084c558de0eaaa1d7ec76da8550a99137dc30b35c7fb40825b15b15a2faebf3d5613c1044d82eff369a4f75511949c4bb3159b8300bf97bd0b83e1991a8b7034c788f55e9ff903beaf3ac7ad341c219cde9d1b9e7492bcd0d8f7d70599dfac5ad9300efd8e8c9e19f63df9a5f39c8968e3b602ebb8658274c5396f06f44145cd36fdba90d0179db2cc6ba4cce901291fe5c91a7fe03018a3ecaef0a3a4eb127a586a7ab70ddfc3290f3306ed32f806a0195b7aaa3491d76ddcfe203234caa52bc61e1a7838f57d3c56824d1828603bb602cf339cdf8092c41cf04b045dfbf87725fb09b480f565a17dfe123f07014f2a8ea0e00d03136bf71ccf4be3dcc448153673a3de927fb123992f0a38fec43fbaf277d47956d62a5dd0475cb1eacaa59a4c32fe4308f1553d30de165fed418443a824213fd1954a6259b5007d135c9e3f2193987ecadda832032fa2c1fc22cf214b1b13cc620407963415d76fbf4bffc0209083e45b0e729c5ad0cae12130df159f8fec3fde18991733c1a07504fb0c46af5ef9e8c1c57eea252001c6b34ffbc7f8fa9924f9c51c714246809c3aa53c7e8dce2c83241edf5ea58", 0x1000, 0x4}, {&(0x7f00000014c0)="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", 0x1000, 0xad}, {&(0x7f0000000300)="bd6b4bee083fb5f8187dabfc4dd678e32ca0b2350162f7be21f06da495ff7dda8e7b9e046548cc20cda305e485ef", 0x2e, 0x1}, {&(0x7f0000000340)="62dcb1fd95c9bb87668a91ecae53df329ddf89882f24226dfb2fe33e221316da5c90671afae9db7a383f91f3d2007e889893e9149cf62d2c5e819c28fdd8edf588cce3abc51834ad0dbaad23ee236948f8fd1c239f01ec0c88c65f88c4f00476a2ef0c2309f212d2aba6b16efb0e8eaca5526999b7b9b12e5261bcb9acb21d8f7ab57f090fee68a48829302a4671cbe7e5866c58e9775455838a8b196d132ce613466deb9b9eb8d06f58b109f3dab9d817ef31c4f818fffe8926", 0xba}, {&(0x7f00000024c0)="85543f2aea17b4d4a9ca4ebaa6838d23752482f2db55b784ac7e56c8b4a50a1b37e7ead97235bdf297daba2f646d39948a7d536a3ccd98d3348b816599043b81d7f1187b42a7bfef10b70943172ec11c23a14e54dd1d6ee3b011e5b77726d46c5295295cfa3ea55a7cedb1f2368854381560bf55d0a69918cc59aa0d333b19be7d9896cffe0adfbbdc9862904e643cf36a776cd60ae29e88ad745dd74fe7afc89490aa3ec23249fd492bba6da27117ce5c44ff25ce7e5139ede8a98d760acccbd21ba4e0523761ab0cebb3a56d777a54a4d8498fbcc64faabb414f47bb", 0xdd, 0x8}, {&(0x7f00000025c0)="82f648a1a3b07c000c4abb5589be399f2348987bf0dcff20c2e9956eec239f11d860a52fb698d53d074146118fe33149645ebc5b4989ad87377b1a5f757fbd1d526cba156faee7cc220f2ef03c8a369dabfae34920fc0d91b6484a4f0e006121e178e30329c8fd0a41c0d6a123e3cbee64e9ab30bc67a82b708a8c437d2e4813f0f44c2b4efb00edf72d1eece9fe9176327221d2fb2f22b3542d477528820554554e8027936a5e0f55005ce662837d1bbf31e20b1539df9c7009c719a5680d35919248281a9923b1b781848f521c", 0xce, 0x2}], 0x0, &(0x7f0000002780)={[{@quota='quota'}], [{@context={'context', 0x3d, 'staff_u'}}, {@hash='hash'}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_lt={'uid<', r4}}, {@uid_gt={'uid>', r6}}, {@euid_gt={'euid>', 0xee00}}]}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) 00:22:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) 00:22:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000180)='./file0\x00', 0x102) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000080)=0x8001) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) 00:22:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) 00:22:54 executing program 3: unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1100}) 00:22:54 executing program 3: unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1100}) 00:22:55 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) 00:22:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:55 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:55 executing program 3: unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1100}) 00:22:55 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='./bus\x00', 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x200}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000017c0)={r5, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x1800, 0x7, 0x4, 0x7, 0x1a9, 0xf5e, 0xffffffffffffff00, 0x9, r5}, &(0x7f0000000340)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000380)={0xfffffffffffffffa, 0x9, 0x8000, 0x0, 0x8, 0x1f, 0x8, 0x2, r6}, 0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000003c0)={r6, 0x7c22, 0x9}, 0x8) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'memory'}]}, 0x8) 00:22:55 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) 00:22:55 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000040)=0x24) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) 00:22:55 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 00:22:55 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 00:22:55 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:55 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 00:22:56 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:56 executing program 3: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_create(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES32], @ANYRESOCT]], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 00:22:56 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:56 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x101000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4001000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") keyctl$join(0x1, &(0x7f0000000380)={'syz', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x8000}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) dup2(0xffffffffffffffff, r3) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) 00:22:56 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x109, 0x1, 0x2, "1029154ab2b5ce57031ad927231b7036", "5931272a4284629f233a538821ef92f909acc508ee72f1abd317b5abaa7963135efb300a77bf238bdf164b91c5102e7581bdab7082f75c189cc4b85e69ba95101ab657d895d844f97427bdc0c6e5dfd776ec19b2524ab481b015c43cfe79201ac584cc02090605c852497a212b2442b59c15c34e6e23ae0e85fd48dc1719bc91b191cb6a10275a8e87753d36e13d78c8a57b1cf48c832d506d6cf529bd473173db3e44c29880af3a989333b41a50d956efc196d8f459ab3e38e1530fd8c4bfb323c943bf8152b8f67cf766606d047d0141c2188e6c1eed29d63965e025e51df8bad1b3f3f79c51d39dd32a61cdeff55857722b56"}, 0x109, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:56 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "2b61b36e8d1c5829f50a3db88ece2449c675e1ac7386ed41b0d73e7bb99167453771755d94d22be07a2b8fc0df9f6fef75c5f1b447a7629aefd98ee025b47e77", "e3fed3e6bb64a2dd04e387f0a8f7aecabf91c3344e1e7ad43f875e3f8d0752b3e75025808e75bae84ec1b9852ce73331592391ec41d3fda1c7b853ec628e14db", "faac536053cbf1bcad61592b059ba7a1117791deda682f831d035c6bedc87a3a"}) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:56 executing program 1: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc39b7fe921bc53cf, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:56 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:56 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'nr0\x00'}) 00:22:56 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{0x1, 0x1, 0x10, 0x1f, 0x4, 0x2, 0x3, 0xffffffffffff8001, 0x9, 0x6, 0xf27, 0x200000000000000}, {0x5804, 0xd000, 0x4, 0x0, 0xffffffff, 0x7ff, 0xfc3, 0x1, 0x9, 0x1, 0xfffffffffffffffa, 0x7}, {0x5000, 0x4, 0xe, 0x1, 0x100, 0x1000, 0x401, 0x3f4, 0xffff, 0x1ff, 0x1f, 0x9}, {0x6000, 0x6000, 0xe, 0x10001, 0xffffffff, 0x0, 0xf52, 0x1, 0x7, 0x3, 0xfffffffffffffff8, 0x9}, {0x5000, 0x2, 0x0, 0x7ff, 0x3, 0x8, 0x7, 0x401, 0xffffffff, 0x8, 0xfff, 0x6c}, {0x3000, 0x1000, 0xd, 0x7, 0x2, 0x0, 0x2, 0x8, 0x4, 0xa78a, 0xfffffffffffff800, 0x5}, {0xf000, 0x100000, 0xe, 0x9, 0x80, 0x5, 0xfffffffffffffffa, 0x10001, 0x5, 0x5, 0xfffffffffffff801, 0x1ff}, {0xd000, 0x6000, 0x1c, 0x4, 0x5, 0x61, 0x6a0, 0xf53, 0x1f, 0x7, 0x2, 0x3}, {0xd000, 0x181004}, {0x4000, 0x1000}, 0x50020, 0x0, 0x4000, 0x20180, 0x2, 0x4000, 0x4, [0x1f, 0x55a, 0x3, 0x3]}) 00:22:57 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:57 executing program 3: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_create(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES32], @ANYRESOCT]], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 00:22:57 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:57 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:57 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2bd3db43052d0f93, 0xe6923d30c96379c6) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x75dccd2e, 0x4) 00:22:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'nr0\x01\x00', 0x4412}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x13, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:22:57 executing program 2: r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x7, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = request_key(&(0x7f0000000200)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffffa) add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="ce6c0908500c4c39d0fd273ba72ea891b59cbe0351663bd575c7ca3aeacfe427501d254952e2cced88d359d9a0e2139508de0a1b126caf8ceb478b10e7a68ab4ae7f1dbda8f5c30a0e4ec7de3ea4f8727b8579061d817912bd67de874cd8ca680f8ac07ef6bdf90e88a717c2051a9e3d31d3bc4a0a5ebc966a767304ab83c3fff1ba6d047e5cdf", 0x87, r2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0xa00000000000000, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r5, 0x100, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x40, 0x8, 0x401, 0x6}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = getpid() setpriority(0x1, r7, 0xffffffffffff0000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) setresuid(r8, 0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) 00:22:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x20240) setsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000040)="a1a9ecf6dd366f623637cfb1f14ded3adb0be46b672255059a83c0e8420a843b995105be936e3187df1983cf8289c1216471209998263983a04b7e9d219dc830bbcffc7ea254d62269019c1dfa1299166b410961d9ad3bcbe128dd5a4e", 0x5d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 399.878906] device nr0 entered promiscuous mode 00:22:57 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0xb) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:57 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 400.004519] device nr0 entered promiscuous mode 00:22:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:58 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0xf00000000000000, &(0x7f00000001c0)={0x7, 0x4, 0x400, 0x1031, 0x24, 0xffffffffffffffff, 0x0, [0x15f]}, 0x3c) 00:22:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000600), 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x184800) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000280)={0x71, 0x2, 0x7fffffff, 0x100, 0x7fffffff}) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sendto(r3, &(0x7f0000000640)="4784e213ed11cb289a60a8eeea0b7e48deef5fe4117f752ee6b9485018a9b3fc92ba9e860eb41990bd5bcb917f2b1cb9c29eb8db8ebbe18e919631297601d695bf14a61a38c5b3f361f40b30ff71048bcf6371b33a1d700ae508266e489b56aeb592d60b32e3d3da75a1f679498123b6d4c73b277128ca2ea13de260170bd4775ddc2e426edea179a810a8321ca0d312213a68621cb1d74c4f7bf756bdf14755a471a8ac4723d36f9212f5792282a25aa647b7ea8c", 0xb5, 0x40180, &(0x7f0000000700)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000084", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000017c0)={r7, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/context\x00', 0x2, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r7, 0x1, 0x9}, 0xc) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r4) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r10 = geteuid() syz_mount_image$iso9660(&(0x7f0000000340)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x80000000, 0x1, &(0x7f0000000440)=[{&(0x7f00000003c0)="eaf1cd5d0b386bdb06250571e73083e1b89b21a5303875d21fd2204e3e9c00526a94219b9db3cf68765f73bf88f622b89f638cbc3f2ff1a8d77226f7119e3d01a381db966aa7a2141d126545b2a99e1057090ee1434dfda5880c02333bc493307e9246d9534554e6b4fa8784bb2493", 0x6f, 0x9}], 0x250210, &(0x7f0000000540)={[{@nocompress='nocompress'}, {@map_off='map=off'}, {@session={'session', 0x3d, 0x20}}, {@unhide='unhide'}, {@mode={'mode', 0x3d, 0x100}}, {@gid={'gid', 0x3d, r9}}, {@cruft='cruft'}, {@map_off='map=off'}, {@uid={'uid', 0x3d, r10}}], [{@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nr0\x01\x00'}}]}) 00:22:58 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xf00000000000000, &(0x7f00000001c0)={0x7, 0x4, 0x400, 0x1031, 0x24, 0xffffffffffffffff, 0x0, [0x15f]}, 0x3c) 00:22:58 executing program 3: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) close(r1) 00:22:58 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffcb, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0016000a0002000a0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 400.527719] bridge_slave_1: FDB only supports static addresses [ 400.556737] bridge_slave_1: FDB only supports static addresses 00:22:58 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="c7ba38263b4f474a47a06b127169", 0x0, 0x800}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 00:22:58 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:58 executing program 3: 00:22:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:58 executing program 3: 00:22:58 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:58 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dn\x00\x00\x80\x00', 0x1c1480, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) modify_ldt$write(0x1, &(0x7f0000000000)={0x2, 0x0, 0x2000, 0x3f, 0x10001, 0x6, 0xdb, 0x3f, 0x3, 0x3}, 0x10) 00:22:59 executing program 3: 00:22:59 executing program 1: inotify_init() r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x200, 0x2, 0x5, 0x9]}, &(0x7f0000000080)=0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:59 executing program 3: 00:22:59 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:22:59 executing program 3: 00:22:59 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) 00:22:59 executing program 3: 00:22:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a}, 0xfffffffffffffddd) sendto$inet(r0, 0x0, 0x341c, 0x40004, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffedb) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x6, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000000000004) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x1, 0x0, 0x6}) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x40000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0xc) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="2999999dd7bb828a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6, 0x0, 0x3}]}, 0x10) ioctl$VT_WAITACTIVE(r4, 0x5607) 00:22:59 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:22:59 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0xc}, 0xb}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x1}], 0x38) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)=[0x6, 0x2]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000001c0)={0x2, 0x6, 0x200, 0x804}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x11, &(0x7f0000000040)={@remote, @empty}, &(0x7f0000000080)=0xc) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x20001, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffd}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000017c0)={r7, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x100000001}}, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xc8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000240)={r7, 0x3}, &(0x7f0000000280)=0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) 00:22:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/igmp\x00') 00:22:59 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x495, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:22:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 00:23:00 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup3(r1, r0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 00:23:00 executing program 2: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) recvmsg$kcm(r0, 0x0, 0x2002) 00:23:00 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto(r3, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x2, 0x0) sendto(r4, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x1, 0x6, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0xb6c0c033e383866e) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r7, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000000780)=""/114) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x48}}, 0x0) fcntl$dupfd(r2, 0x203, r9) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f00000005c0), 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 00:23:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x22a, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) shutdown(r1, 0x1) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x1a00, 0x0, 0x0) [ 402.472372] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 402.533548] ================================================================== [ 402.541359] BUG: KASAN: use-after-free in tcp_init_tso_segs+0x1ae/0x200 [ 402.548328] Read of size 2 at addr ffff8880991380f0 by task syz-executor.3/23328 [ 402.555864] [ 402.557504] CPU: 1 PID: 23328 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 402.564521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.577183] Call Trace: [ 402.579789] dump_stack+0x138/0x197 [ 402.583561] ? tcp_init_tso_segs+0x1ae/0x200 [ 402.587987] print_address_description.cold+0x7c/0x1dc [ 402.593285] ? tcp_init_tso_segs+0x1ae/0x200 [ 402.597709] kasan_report.cold+0xa9/0x2af [ 402.601877] __asan_report_load2_noabort+0x14/0x20 [ 402.606916] tcp_init_tso_segs+0x1ae/0x200 [ 402.611425] ? tcp_tso_segs+0x7d/0x1c0 [ 402.615330] tcp_write_xmit+0x15e/0x4960 [ 402.619413] ? tcp_v6_md5_lookup+0x23/0x30 [ 402.623658] ? tcp_established_options+0x2c5/0x420 [ 402.628699] ? tcp_current_mss+0x1dc/0x2f0 [ 402.632946] ? __alloc_skb+0x3ee/0x500 [ 402.636862] __tcp_push_pending_frames+0xa6/0x260 [ 402.641720] tcp_send_fin+0x17e/0xc40 [ 402.645657] ? lock_sock_nested+0x8c/0x110 [ 402.649898] tcp_shutdown+0xe2/0x110 [ 402.653608] ? tcp_tx_timestamp.part.0+0x290/0x290 [ 402.658729] inet_shutdown+0x178/0x350 [ 402.662709] SyS_shutdown+0xe1/0x170 [ 402.666421] ? SyS_getsockopt+0x1e0/0x1e0 [ 402.670643] ? SyS_clock_gettime+0xf8/0x180 [ 402.675319] ? do_syscall_64+0x53/0x640 [ 402.679299] ? SyS_getsockopt+0x1e0/0x1e0 [ 402.683468] do_syscall_64+0x1e8/0x640 [ 402.687351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.692197] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 402.697410] RIP: 0033:0x459a09 [ 402.700595] RSP: 002b:00007f2c62355c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 402.708408] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459a09 [ 402.715686] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 402.723119] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 402.730394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c623566d4 [ 402.742330] R13: 00000000004c859b R14: 00000000004df290 R15: 00000000ffffffff [ 402.749608] [ 402.751328] Allocated by task 23326: [ 402.755049] save_stack_trace+0x16/0x20 [ 402.759019] save_stack+0x45/0xd0 [ 402.762474] kasan_kmalloc+0xce/0xf0 [ 402.766218] kasan_slab_alloc+0xf/0x20 [ 402.770112] kmem_cache_alloc_node+0x144/0x780 [ 402.774779] __alloc_skb+0x9c/0x500 [ 402.778392] sk_stream_alloc_skb+0xb3/0x780 [ 402.782709] tcp_sendmsg_locked+0xf61/0x3200 [ 402.787104] tcp_sendmsg+0x30/0x50 [ 402.790688] inet_sendmsg+0x122/0x500 [ 402.794486] sock_sendmsg+0xce/0x110 [ 402.798206] SYSC_sendto+0x206/0x310 [ 402.801916] SyS_sendto+0x40/0x50 [ 402.805479] do_syscall_64+0x1e8/0x640 [ 402.809363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 402.814710] [ 402.816479] Freed by task 23326: [ 402.820029] save_stack_trace+0x16/0x20 [ 402.824176] save_stack+0x45/0xd0 [ 402.827619] kasan_slab_free+0x75/0xc0 [ 402.831511] kmem_cache_free+0x83/0x2b0 [ 402.835486] kfree_skbmem+0x8d/0x120 [ 402.839195] __kfree_skb+0x1e/0x30 [ 402.842744] tcp_remove_empty_skb.part.0+0x231/0x2e0 [ 402.847973] tcp_sendmsg_locked+0x1ced/0x3200 [ 402.852474] tcp_sendmsg+0x30/0x50 [ 402.856022] inet_sendmsg+0x122/0x500 [ 402.859813] sock_sendmsg+0xce/0x110 [ 402.863511] SYSC_sendto+0x206/0x310 [ 402.867213] SyS_sendto+0x40/0x50 [ 402.870749] do_syscall_64+0x1e8/0x640 [ 402.874663] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 402.879839] [ 402.881462] The buggy address belongs to the object at ffff8880991380c0 [ 402.881462] which belongs to the cache skbuff_fclone_cache of size 472 [ 402.894813] The buggy address is located 48 bytes inside of [ 402.894813] 472-byte region [ffff8880991380c0, ffff888099138298) [ 402.906587] The buggy address belongs to the page: [ 402.911712] page:ffffea0002644e00 count:1 mapcount:0 mapping:ffff8880991380c0 index:0x0 [ 402.919963] flags: 0x1fffc0000000100(slab) [ 402.924285] raw: 01fffc0000000100 ffff8880991380c0 0000000000000000 0000000100000006 [ 402.932262] raw: ffffea0001f8d460 ffffea0002148a20 ffff88821b75f3c0 0000000000000000 [ 402.940235] page dumped because: kasan: bad access detected [ 402.946082] [ 402.947724] Memory state around the buggy address: [ 402.952652] ffff888099137f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 402.960104] ffff888099138000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 402.967467] >ffff888099138080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 402.974816] ^ [ 402.982077] ffff888099138100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.990293] ffff888099138180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.997925] ================================================================== [ 403.008151] Disabling lock debugging due to kernel taint [ 403.018198] Kernel panic - not syncing: panic_on_warn set ... [ 403.018198] [ 403.018319] kobject: 'tx-0' (ffff8880895ff098): auto cleanup kobject_del [ 403.025611] CPU: 1 PID: 23328 Comm: syz-executor.3 Tainted: G B 4.14.145 #0 [ 403.025615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.025618] Call Trace: [ 403.025632] dump_stack+0x138/0x197 [ 403.025643] ? tcp_init_tso_segs+0x1ae/0x200 [ 403.025650] panic+0x1f2/0x426 [ 403.025657] ? add_taint.cold+0x16/0x16 [ 403.025665] ? ___preempt_schedule+0x16/0x18 [ 403.025678] kasan_end_report+0x47/0x4f [ 403.034779] kobject: 'tx-0' (ffff8880895ff098): calling ktype release [ 403.040745] kasan_report.cold+0x130/0x2af [ 403.040754] __asan_report_load2_noabort+0x14/0x20 [ 403.040762] tcp_init_tso_segs+0x1ae/0x200 [ 403.040768] ? tcp_tso_segs+0x7d/0x1c0 [ 403.040776] tcp_write_xmit+0x15e/0x4960 [ 403.040784] ? tcp_v6_md5_lookup+0x23/0x30 [ 403.040791] ? tcp_established_options+0x2c5/0x420 [ 403.040800] ? tcp_current_mss+0x1dc/0x2f0 [ 403.040813] ? __alloc_skb+0x3ee/0x500 [ 403.050530] kobject: 'tx-0': free name [ 403.054237] __tcp_push_pending_frames+0xa6/0x260 [ 403.057856] kobject: 'queues' (ffff888092f0a548): kobject_cleanup, parent (null) [ 403.062352] tcp_send_fin+0x17e/0xc40 [ 403.062362] ? lock_sock_nested+0x8c/0x110 [ 403.062370] tcp_shutdown+0xe2/0x110 [ 403.062376] ? tcp_tx_timestamp.part.0+0x290/0x290 [ 403.062384] inet_shutdown+0x178/0x350 [ 403.062396] SyS_shutdown+0xe1/0x170 [ 403.067184] kobject: 'queues' (ffff888092f0a548): calling ktype release [ 403.069552] ? SyS_getsockopt+0x1e0/0x1e0 [ 403.074031] kobject: 'queues' (ffff888092f0a548): kset_release [ 403.077913] ? SyS_clock_gettime+0xf8/0x180 [ 403.084990] kobject: 'queues': free name [ 403.089222] ? do_syscall_64+0x53/0x640 [ 403.094507] kobject: 'nr0' (ffff888059e4a030): kobject_uevent_env [ 403.098380] ? SyS_getsockopt+0x1e0/0x1e0 [ 403.102603] kobject: 'nr0' (ffff888059e4a030): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 403.106295] do_syscall_64+0x1e8/0x640 [ 403.121664] kobject: 'loop0' (ffff888067eaa4a0): kobject_uevent_env [ 403.123750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.127754] kobject: 'loop0' (ffff888067eaa4a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 403.132588] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 403.132595] RIP: 0033:0x459a09 [ 403.132599] RSP: 002b:00007f2c62355c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 403.132607] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459a09 [ 403.132610] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 403.132614] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 403.132617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c623566d4 [ 403.132621] R13: 00000000004c859b R14: 00000000004df290 R15: 00000000ffffffff [ 403.134341] Kernel Offset: disabled [ 403.297120] Rebooting in 86400 seconds..