540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:45 executing program 4: 02:28:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:45 executing program 3: 02:28:45 executing program 1: 02:28:45 executing program 5: 02:28:46 executing program 1: 02:28:46 executing program 4: 02:28:46 executing program 5: 02:28:46 executing program 3: 02:28:46 executing program 5: 02:28:46 executing program 3: 02:28:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:46 executing program 1: 02:28:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:46 executing program 4: 02:28:46 executing program 3: 02:28:46 executing program 5: 02:28:46 executing program 1: 02:28:46 executing program 5: 02:28:47 executing program 4: 02:28:47 executing program 3: 02:28:47 executing program 1: 02:28:47 executing program 5: 02:28:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:47 executing program 3: 02:28:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:47 executing program 4: 02:28:47 executing program 1: 02:28:47 executing program 5: 02:28:47 executing program 3: 02:28:47 executing program 4: 02:28:47 executing program 1: 02:28:47 executing program 3: 02:28:47 executing program 5: 02:28:48 executing program 3: 02:28:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:48 executing program 1: 02:28:48 executing program 4: 02:28:48 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:48 executing program 3: 02:28:48 executing program 1: 02:28:48 executing program 5: 02:28:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:48 executing program 4: 02:28:48 executing program 5: 02:28:48 executing program 1: 02:28:48 executing program 3: 02:28:49 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:49 executing program 5: 02:28:49 executing program 4: 02:28:49 executing program 1: 02:28:49 executing program 3: 02:28:49 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:49 executing program 5: 02:28:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:49 executing program 1: 02:28:49 executing program 4: 02:28:49 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:49 executing program 3: 02:28:49 executing program 5: 02:28:49 executing program 1: 02:28:49 executing program 4: 02:28:49 executing program 5: 02:28:50 executing program 3: 02:28:50 executing program 5: 02:28:50 executing program 1: 02:28:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:50 executing program 3: 02:28:50 executing program 4: 02:28:50 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:50 executing program 5: 02:28:50 executing program 1: 02:28:50 executing program 4: 02:28:50 executing program 3: 02:28:50 executing program 4: 02:28:50 executing program 5: 02:28:50 executing program 3: 02:28:50 executing program 1: 02:28:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:51 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0xffffffffffffffff, @local}, 0x10) syz_emit_ethernet(0x5d, &(0x7f0000000000)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 02:28:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:28:51 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x323) 02:28:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00005c8f58), 0xeffdffff, 0x0, 0x0, 0x0) dup3(r2, r0, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setown(r2, 0x8, r3) 02:28:51 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x33, &(0x7f00000001c0), 0x10) 02:28:51 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) 02:28:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:28:51 executing program 1: r0 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003080)={0x14, 0x1a, 0x301}, 0x14}}, 0x0) 02:28:52 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b4"], 0x1, 0x0, 0x0) 02:28:52 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fd"], 0x1}, 0x0) 02:28:52 executing program 1: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 689.652043] device lo entered promiscuous mode 02:28:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:52 executing program 5: 02:28:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3f71919") clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(r1, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000280)) 02:28:52 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x323) 02:28:54 executing program 3: pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:28:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5, 0x10}, 0xc) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x7fffffff, 0x7, 0x0, 0x6, 0x84040, 0xa, 0x1, 0x9, 0x0, 0x3, 0xff, 0x8007, 0x9, 0x4, 0x6, 0x0, 0x4, 0x2187, 0x6, 0x7fffffff, 0x9, 0x3, 0xffff, 0x92, 0xdab3, 0x5, 0x3, 0x1, 0x0, 0x0, 0x6, 0x2335, 0x6391, 0x100000001, 0x0, 0x8003, 0x7, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x588, 0xfffffffffffffffc, 0x7, 0x1, 0x0, 0x3}) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000009800)={&(0x7f0000009700)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000009780), 0x0, &(0x7f00000097c0)=""/16, 0x10}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f0000009840)={0x17, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="88779f77"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, [], r3, 0xb}, 0x48) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) sendmsg$kcm(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="f92ec907ac18865aaa51e2c7cd7fd3f425c935e597a6a3b2c48745a3e0f2afd852834dd01e945db0e86e7b73f2a17f06a26c3f0f951c05289fdc7469b4bb49c623cbb1bf0b02f191cb66e3c3d871b3171b378274beef73e20795b7b2317530b0a4e99e1accff1a1186f3cb11f9bb43aed8d891af85fd9ee372d0374c09358f13b945f35c48ac3fdaa4d95fb3b46858deea13569e240b8699fecf0706b2c0d29dd55669a279ab3024c79aaf568dcdc10bd17b4f6e6e311e1d23d1b4654a15af115c2d054280b37de34dda5c0cda", 0xcd}], 0x1}, 0x800) write$cgroup_int(r4, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000780)='cpu.stat\x00') ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) gettid() 02:28:54 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d752"], 0x1, 0x0, 0x0) 02:28:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffe43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x4) pwritev(r1, 0x0, 0x0, 0x81805) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000006) 02:28:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:54 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x323) 02:28:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) unlink(0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0xfd03) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 02:28:54 executing program 4: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 02:28:54 executing program 3: r0 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r0, 0x0, 0x0) 02:28:55 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753240371707ce958005241b6d46a627c320000000000000000392f39d9b3980e8e07ddb3254ea10cb495226c3ab89d58ec49d7bd5f441cdb58a8764ef1419b4ce8ad"], 0x1, 0x0, 0x0) 02:28:55 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16ea) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5395797165ca5688fde9fb753c0a4ba39ecb17d7e77f91ce9d89f8cffaaa4fc977a55a1497e5808365cea47d7c1513f030a7db82cf8cdb2e06191bd7869c763f9c5d3a3ac9797d1201605cb3c72ecdbadbe9e3801150fae50441e3351f751f34d998b1c8a9c4817f6bbd999c13f9e796df9302828f7fd946bc90a59"], 0x7c}, 0x0) 02:28:55 executing program 3: syz_open_dev$loop(0x0, 0x4000001, 0x182) r0 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffe43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 02:28:55 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0x80044323, &(0x7f0000000240)) 02:28:55 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b587022f3c1a70dfb4a7e42f4d969d348234aa28280e62eba139f5c6be7347a4f3d9a4"], 0x1, 0x0, 0x0) 02:28:55 executing program 0: setregid(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x323) 02:28:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00005c8f58), 0xeffdffff, 0x0, 0x0, 0x0) r3 = dup3(r2, r0, 0x0) r4 = getpgrp(0xffffffffffffffff) fcntl$setown(r2, 0x8, r4) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, 0x0) 02:28:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), 0x4) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffe43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 02:28:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x30e) 02:28:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 02:28:56 executing program 3: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x1c) close(r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), 0x4) accept$unix(0xffffffffffffffff, 0x0, 0x0) 02:28:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x80ef, 0xffffffff]) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0x9, 0x7]) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 02:28:56 executing program 0: 02:28:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 02:28:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(arc4-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="e2", 0x1) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) recvmmsg(r1, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003040)=""/4, 0x34000}], 0x3ae}}], 0x1, 0x0, 0x0) 02:28:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:57 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f"]]], 0x8}, 0x0) 02:28:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @loopback}, 0x4}) 02:28:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:58 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b587022f3c1a70dfb4a7e42f4d969d348234aa28280e62eba139f5c6be7347a4f3d9a4f0bcd5a2e6e6af71f0e645ac7e492b0d04db34e30f6bc29154221969c8f8b9dd6866fae1065744"], 0x1, 0x0, 0x0) 02:28:58 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:28:58 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x5d, &(0x7f0000000000)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 02:28:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x88}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 02:28:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, 0x0) 02:28:59 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753240371707ce958005241b6d46a627c32"], 0x1, 0x0, 0x0) 02:28:59 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000d80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000680)="cef7a8e0d1", 0x5}]) 02:28:59 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b587022f3c1a70dfb4a7e42f4d969d348234aa28280e62eba139f5c6be7347a4f3d9a4f0bcd5a2e6e6af71f0e645ac7e492b0d04db34e30f6bc29154221969c8f8b9dd6866fae10657449f198ab0013fe5d8b06a74589d95a4e476d6ed123673a513fb8f263fb574933040235da6e520fb8c9fe2849245bab807b859a67ebc7e9aad7bf0"], 0x1, 0x0, 0x0) 02:28:59 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000180), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) 02:28:59 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa"]]], 0x8}, 0x0) 02:28:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x1ff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x81, 0x200, 0x3, 0x3, 0x0, 0x4, 0x2, 0x3, 0x3, 0x7fff, 0xf21f, 0x4, 0x8000, 0x85, 0xffff, 0xba4d, 0x0, 0x20, 0x101, 0xfff, 0x5, 0x1, 0x0, 0x9ff1, 0x8001, 0x3f, 0x401, 0x0, 0x249, 0x1, 0x0, 0x4, 0x6, 0x0, 0x0, 0x4b, 0x0, 0xffffffff, 0x3, @perf_config_ext={0x80, 0x80}, 0x10000, 0xd, 0x0, 0x2, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x3) perf_event_open(&(0x7f0000000840)={0x0, 0x70, 0x0, 0x5933, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x0, 0xf37, 0x400000000000a15c, 0xbe14, 0x7, 0x3f, 0xb2e5, 0x0, 0x9, 0x9, 0x4, 0x9, 0x0, 0xffffffffffffffc0, 0xb834, 0x0, 0x45, 0x6, 0x2, 0x7, 0x5, 0x6, 0x100000001, 0x0, 0x0, 0x8, 0x0, 0x2, 0xff, 0x0, 0xff, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x9, 0x5, 0x100000001, 0xb04, 0xe1ec}, 0x0, 0x9, r0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000000000000000180000000500000000000000000000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0xc}, 0x48) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) mkdirat$cgroup(r0, &(0x7f0000000600)='syz1\x00', 0x1ff) r3 = openat$cgroup_ro(r0, &(0x7f00000007c0)='up.controllers\x00\x00\x00\x00\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000640)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r1, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="dfef284712f86d8ef760eec9ea1859d9821f75f6b2d7aea695901d6c57481a4fccd02940b6a20c61a804d7f6c82abed5ec9ee1ce6505b93fda9cc000dbe186a49d74f857b5efbe5d545161d072d229edb4b5362a9c294448afc624e8a246834b2a085a5310961b498cb4fc97406206b99352cbe649042f3acec8acf5059de56f51209ab43c0bd60145b5dfaee9574c5174609b95dc704157822c7c329d0a4d45a4fb8e9f0b662fc8898d847b28f7d94358425fd6d6f046fb4b0d4b56519190794790d2a4935253f6006b86ef5e46158b88fc96456a26126965", 0xd9}], 0x1}, 0x48001) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r4, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500)='!/\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2a06040000000e00, 0x5000000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x1a1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x10, &(0x7f0000000280)={&(0x7f00000008c0)=""/214, 0xd6, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r6, 0x4) 02:28:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:28:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340), 0x0) 02:28:59 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339"], 0x1, 0x0, 0x0) 02:28:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000000), 0xc) syz_genetlink_get_family_id$tipc(0x0) 02:28:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x12b, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 02:29:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b93c564b63ff2d3822e13030e96700000000b4ce360000a2", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006dc0)=[{0x1000000f0ffffff, 0xffffff7f00000000, &(0x7f0000000080)=[{&(0x7f0000000140), 0x8000a0}], 0x1}], 0x1, 0x0) 02:29:00 executing program 5: r0 = gettid() r1 = epoll_create1(0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x0, 0x0) semget$private(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lstat(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) clock_getres(0x0, 0x0) r3 = socket(0x0, 0x80b, 0xfffffffffffffff9) setsockopt$inet_buf(r3, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffc52) lstat(0x0, &(0x7f0000000180)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, &(0x7f0000000300)) getgroups(0x0, 0x0) fstat(r1, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x9}, 0x28, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) stat(0x0, 0x0) tkill(r0, 0x1000000000016) 02:29:00 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) flock(r0, 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2000000000000003) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5080085f6017afe5348ea0000000000864d72a8d987b4026d876296918a2b35e362c613f350b31d5ade9634d4ee55f1826672d3259193150d503ca3a07dea8a942679c1528f1edbacd283f8ad8d23a0bf1a4e46380968a15a99"], 0x5a}, 0x0) 02:29:00 executing program 0: r0 = syz_open_dev$loop(0x0, 0x4000001, 0x0) r1 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffe43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) [ 697.214777] ptrace attach of "/root/syz-executor4"[21390] was attempted by "/root/syz-executor4"[21435] 02:29:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x32, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f000000c980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=[{0x10, 0x11}], 0x10}}], 0x1, 0x0) 02:29:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:00 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f49c2a77033bdb9072bff9f507386dcfa4a8e9fabdd3fb1402682653fa8cd"]]], 0x8}, 0x0) 02:29:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) poll(&(0x7f0000000140)=[{r1}, {r3}], 0x2, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000000) vmsplice(r2, &(0x7f0000000100), 0x2be, 0x2) 02:29:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0xfffffffffffffffd) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x8, &(0x7f000055bfe4), 0xe1) 02:29:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) write$cgroup_int(r0, &(0x7f00000000c0), 0xfd03) 02:29:00 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000004c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000600), 0x0}, 0x20) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='0\x00') 02:29:00 executing program 3: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) clone(0x1002000210a, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) truncate(0x0, 0x0) 02:29:00 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f49c2a77033bdb9072bff9f507386dcfa4a8e9fabdd3fb1"]]], 0x8}, 0x0) 02:29:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:01 executing program 1: r0 = epoll_create1(0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) close(r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 02:29:01 executing program 0: 02:29:01 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753"], 0x1, 0x0, 0x0) 02:29:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x85) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bfe2566c845a0c58b400", "ee52c10d1e72a9430c222985fcedff747a3131991a00000800000004002000"}) 02:29:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x6) close(r1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x3) r2 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) close(r2) 02:29:01 executing program 1: 02:29:01 executing program 0: 02:29:01 executing program 4: 02:29:02 executing program 5: 02:29:02 executing program 3: 02:29:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r2, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000016f000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000280), 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:02 executing program 0: r0 = msgget(0x3, 0x0) msgsnd(r0, &(0x7f00000001c0), 0x8, 0x800) 02:29:02 executing program 1: 02:29:02 executing program 4: 02:29:02 executing program 5: 02:29:02 executing program 1: 02:29:02 executing program 5: 02:29:02 executing program 0: 02:29:02 executing program 4: 02:29:02 executing program 3: 02:29:02 executing program 1: 02:29:02 executing program 5: 02:29:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) ioctl$TCXONC(r1, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:02 executing program 4: 02:29:02 executing program 1: 02:29:02 executing program 3: 02:29:02 executing program 0: 02:29:03 executing program 5: 02:29:03 executing program 4: 02:29:03 executing program 5: 02:29:03 executing program 3: 02:29:03 executing program 0: 02:29:03 executing program 1: 02:29:03 executing program 5: 02:29:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:03 executing program 3: 02:29:03 executing program 0: 02:29:03 executing program 4: 02:29:03 executing program 1: 02:29:03 executing program 5: 02:29:04 executing program 4: 02:29:04 executing program 5: 02:29:04 executing program 0: 02:29:04 executing program 3: 02:29:04 executing program 1: 02:29:04 executing program 4: 02:29:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:04 executing program 0: 02:29:04 executing program 5: 02:29:04 executing program 3: 02:29:04 executing program 1: 02:29:04 executing program 4: 02:29:04 executing program 1: 02:29:04 executing program 3: 02:29:04 executing program 0: 02:29:04 executing program 5: 02:29:04 executing program 4: 02:29:05 executing program 1: 02:29:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:05 executing program 3: 02:29:05 executing program 0: 02:29:05 executing program 5: 02:29:05 executing program 4: 02:29:05 executing program 1: 02:29:05 executing program 1: 02:29:05 executing program 3: 02:29:05 executing program 5: 02:29:05 executing program 0: 02:29:05 executing program 4: 02:29:05 executing program 5: 02:29:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:06 executing program 3: 02:29:06 executing program 0: 02:29:06 executing program 1: 02:29:06 executing program 4: 02:29:06 executing program 5: 02:29:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x0) 02:29:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@broadcast, @current}, {@broadcast, @broadcast}}}, 0x28) 02:29:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) geteuid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000009200443a00fe80000000000000000000000000000064022000000000000000000000000001000090780000c745e3472150024900000000000000000000"], 0x1) 02:29:06 executing program 1: socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') preadv(r1, &(0x7f0000002240)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) 02:29:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x0) [ 703.614390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.621134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.748218] net_ratelimit: 2 callbacks suppressed [ 703.748241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.791441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.798246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:06 executing program 0: sysinfo(&(0x7f0000000000)=""/32) [ 703.857159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.900885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.962035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.055481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 704.134004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:29:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 02:29:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) 02:29:07 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffff80000000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 704.318305] input: syz0 as /devices/virtual/input/input12 [ 704.371802] input: syz0 as /devices/virtual/input/input13 [ 704.403602] input: syz0 as /devices/virtual/input/input14 02:29:07 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 704.482179] input: syz0 as /devices/virtual/input/input15 02:29:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 02:29:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) geteuid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000009200443a00fe80000000000000000000000000000064022000000000000000000000000001000090780000c745e3472150024900000000000000000000"], 0x1) [ 704.821063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='trustedppp0ppp0\x00') 02:29:07 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) [ 704.897772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:29:08 executing program 5: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002300)=""/4096, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 02:29:08 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:08 executing program 1: io_setup(0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002300)=""/4096, 0x1000) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) 02:29:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1) 02:29:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) geteuid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000009200443a00fe80000000000000000000000000000064022000000000000000000000000001000090780000c745e3472150024900000000000000000000"], 0x1) 02:29:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x40000000000) 02:29:08 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 705.565067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:08 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffb) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1) [ 705.656577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.681793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r1, &(0x7f00000022c0)=[{&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x2, 0x0) 02:29:08 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 705.859329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:29:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 705.902478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:09 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 705.959104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.065267] binder: 21795:21796 transaction failed 29189/-22, size 0-0 line 2834 02:29:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}) 02:29:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) geteuid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000009200443a00fe80000000000000000000000000000064022000000000000000000000000001000090780000c745e3472150024900000000000000000000"], 0x1) 02:29:09 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x40000000000) 02:29:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b3fdc)) syz_open_pts(r1, 0x0) pipe(&(0x7f0000000180)) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 706.518059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:09 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 02:29:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 706.625774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.834918] binder: 21795:21826 transaction failed 29189/-22, size 0-0 line 2834 02:29:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 706.887247] binder: undelivered TRANSACTION_ERROR: 29189 02:29:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) geteuid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 706.952443] binder: undelivered TRANSACTION_ERROR: 29189 02:29:10 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 02:29:10 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/47, 0x2f}], 0x1, 0x0) 02:29:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 707.222674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 707.318915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:29:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:10 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0xd, 0x4, &(0x7f0000519fa8)=@framed={{}, [@ldst={0x3, 0x0, 0xb, 0x1}]}, &(0x7f0000000000)='G.\xdd:@\x83\xb90PL\x00', 0x8000, 0x1000, &(0x7f0000000040)=""/4096}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 02:29:10 executing program 0: io_setup(0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002300)=""/4096, 0x1000) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 02:29:10 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc3}) 02:29:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) geteuid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000080)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}}) 02:29:10 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cf, 0x0) 02:29:10 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002300)=""/4096, 0x1000) 02:29:11 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:11 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:11 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x0) 02:29:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:11 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/dev/ashmem\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 02:29:11 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f0000000340), 0x334, 0x100000000000000) [ 708.480688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:11 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/94, 0x5e) r1 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000002300)=""/4096, 0x1000) 02:29:11 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:11 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc, 0x0, 0x4b}) 02:29:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:12 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 708.993290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 709.084373] net_ratelimit: 1 callbacks suppressed [ 709.084394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:29:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:12 executing program 1: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) utimes(&(0x7f0000001300)='./file0\x00', 0x0) 02:29:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r1, &(0x7f0000000340), 0x334, 0x100000000000000) 02:29:12 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:12 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/dev/zero\x00', r0}, 0x30) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x120000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040), &(0x7f0000000280)=0x4) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x118, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x45}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50000000000000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x118}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x10000100}, 0xc) 02:29:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 709.440229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:12 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:12 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 709.566434] print_req_error: 250 callbacks suppressed [ 709.566458] print_req_error: I/O error, dev loop0, sector 1024 [ 709.675992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.734557] print_req_error: I/O error, dev loop0, sector 0 [ 709.740396] buffer_io_error: 248 callbacks suppressed [ 709.740418] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 709.753761] print_req_error: I/O error, dev loop0, sector 8 [ 709.759536] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 709.767346] print_req_error: I/O error, dev loop0, sector 16 [ 709.773274] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 709.781008] print_req_error: I/O error, dev loop0, sector 24 [ 709.786944] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 709.794755] print_req_error: I/O error, dev loop0, sector 32 [ 709.800607] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 709.808507] print_req_error: I/O error, dev loop0, sector 40 [ 709.814462] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 709.822287] print_req_error: I/O error, dev loop0, sector 48 [ 709.828139] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 709.835973] print_req_error: I/O error, dev loop0, sector 56 [ 709.841929] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 709.849684] print_req_error: I/O error, dev loop0, sector 64 [ 709.855702] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 709.863556] Buffer I/O error on dev loop0, logical block 9, lost async page write 02:29:12 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:12 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 02:29:13 executing program 2: socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:13 executing program 5: mkdir(&(0x7f0000000300)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/20, 0x14) 02:29:13 executing program 0: socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00') dup2(r1, r2) 02:29:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 02:29:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 02:29:13 executing program 0: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x4000) [ 710.769323] input: syz0 as /devices/virtual/input/input18 02:29:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 02:29:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 710.855740] input: syz0 as /devices/virtual/input/input19 [ 711.068006] binder: 22031:22032 ioctl 40045567 0 returned -22 02:29:14 executing program 1: r0 = socket$packet(0x11, 0x802, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x0, @dev}, 0x10) 02:29:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 02:29:14 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 02:29:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:14 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:14 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 02:29:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 02:29:14 executing program 1: perf_event_open(&(0x7f0000000240)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:29:14 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 711.670403] binder: BINDER_SET_CONTEXT_MGR already set [ 711.675991] binder: 22043:22066 ioctl 40046207 0 returned -16 02:29:14 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) unlink(0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:29:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 02:29:14 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000100)='./bus\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:29:14 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:15 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) 02:29:15 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6100) fdatasync(0xffffffffffffffff) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 02:29:17 executing program 0: syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00') 02:29:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, 0x0, 0x0, 0x0) 02:29:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') preadv(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000300)=""/224, 0xe0}], 0x2, 0x0) 02:29:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:17 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6100) fdatasync(0xffffffffffffffff) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 714.184858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:17 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:29:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, 0x0, 0x0, 0x0) 02:29:17 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) 02:29:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 714.552849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:17 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) wait4(0x0, 0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 02:29:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, 0x0, 0x0, 0x0) 02:29:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000500)=""/165, 0xa5}], 0x2, 0x0) 02:29:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:29:18 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 715.047694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:29:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000001000000001000000000000005c49"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 02:29:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') readv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1) 02:29:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) 02:29:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) [ 715.293433] binder_alloc: 22043: binder_alloc_buf, no vma [ 715.299063] binder: 22175:22178 transaction failed 29189/-3, size 0-0 line 2973 [ 715.413178] binder_alloc: 22043: binder_alloc_buf, no vma [ 715.418881] binder: 22175:22185 transaction failed 29189/-3, size 0-0 line 2973 02:29:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000003100)=""/4096) [ 715.520400] binder: undelivered TRANSACTION_ERROR: 29189 [ 715.532700] binder: undelivered TRANSACTION_ERROR: 29189 02:29:18 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 02:29:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 02:29:18 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000100)='./bus\x00', 0x0) 02:29:18 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, &(0x7f0000000340)={0x20}, 0x8) 02:29:18 executing program 4: r0 = socket$inet6(0xa, 0x10000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 02:29:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 02:29:19 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000280)}) 02:29:19 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000280)="af"}) 02:29:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:19 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000240)) 02:29:19 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/dev/zero\x00', r0}, 0x30) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x120000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040), &(0x7f0000000280)=0x4) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x118, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x45}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x118}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x10000100}, 0xc) 02:29:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5452, &(0x7f0000000040)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [], {0x0, 0x1c9c380}}) 02:29:20 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='#a '], 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 02:29:20 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) listen(0xffffffffffffffff, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f0000000000), 0x0) 02:29:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 02:29:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000140)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\r']}) 02:29:20 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0x80044324, &(0x7f0000000240)) 02:29:20 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 02:29:20 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000000)=""/143, 0x8f}], 0x1, 0x0) [ 717.386417] misc userio: Invalid payload size 02:29:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x81785501, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [], {0x0, 0x1c9c380}}) 02:29:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000000000000000000000000000001"]) 02:29:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 02:29:20 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000280)}) 02:29:20 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:20 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) [ 717.862366] misc userio: Invalid payload size 02:29:20 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x400c4301, &(0x7f0000000100)={0x0, &(0x7f0000000280)}) 02:29:21 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x400000000000003, 0x6) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000002c00)=@ethernet={0x0, @broadcast}, 0x80, 0x0}}, {{&(0x7f0000003580)=@l2, 0x80, 0x0}}], 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1b0000001200030207fffd946fa283080f00190000000000000031", 0x1b}], 0x1}, 0x0) io_destroy(0x0) 02:29:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) [ 718.134483] misc userio: Invalid payload size 02:29:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) syz_open_procfs(0x0, 0x0) 02:29:21 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) [ 718.266995] netlink: 11 bytes leftover after parsing attributes in process `syz-executor3'. 02:29:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:21 executing program 4: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) poll(&(0x7f0000000380)=[{r2}], 0x1, 0x7) [ 718.462761] misc userio: Invalid payload size 02:29:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 02:29:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 02:29:21 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:21 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:21 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000000)=""/143, 0x8f}], 0x1, 0x0) 02:29:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000001c0)) [ 719.015269] netlink: 11 bytes leftover after parsing attributes in process `syz-executor3'. 02:29:22 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x120000) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040), &(0x7f0000000280)=0x4) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f00000002c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x4000010) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) 02:29:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:22 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:22 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0xc8, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xc8}}, 0x4000010) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) 02:29:22 executing program 1: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 02:29:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:22 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/dev/zero\x00', r0}, 0x30) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f00000002c0), 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) ioctl$LOOP_CLR_FD(r3, 0x4c01) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0xfc, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x45}]}, @TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0xfc}}, 0x4000010) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) 02:29:22 executing program 1: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:22 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/dev/zero\x00', r0}, 0x30) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x120000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040), &(0x7f0000000280)=0x4) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f00000002c0), 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x11c, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x45}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) 02:29:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 02:29:23 executing program 1: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:23 executing program 4: 02:29:23 executing program 3: 02:29:23 executing program 4: 02:29:23 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:25 executing program 5: 02:29:25 executing program 4: 02:29:25 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:25 executing program 3: 02:29:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:26 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:26 executing program 4: 02:29:26 executing program 3: 02:29:26 executing program 5: 02:29:26 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:26 executing program 5: 02:29:26 executing program 4: 02:29:26 executing program 3: 02:29:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:26 executing program 4: 02:29:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:26 executing program 5: 02:29:26 executing program 3: 02:29:26 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:26 executing program 4: 02:29:26 executing program 5: 02:29:27 executing program 3: 02:29:27 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="d7", 0x1}], 0x1, 0x0) 02:29:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:27 executing program 4: 02:29:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:27 executing program 5: 02:29:27 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:27 executing program 3: 02:29:27 executing program 4: 02:29:27 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, 0x0, 0x0, 0x0) 02:29:27 executing program 4: 02:29:27 executing program 5: 02:29:27 executing program 3: 02:29:27 executing program 0: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:27 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, 0x0, 0x0, 0x0) 02:29:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:28 executing program 3: 02:29:28 executing program 5: 02:29:28 executing program 4: 02:29:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:28 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, 0x0, 0x0, 0x0) 02:29:28 executing program 4: 02:29:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:28 executing program 5: 02:29:28 executing program 3: 02:29:28 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080), 0x0, 0x0) 02:29:28 executing program 4: 02:29:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:28 executing program 5: 02:29:28 executing program 3: 02:29:28 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080), 0x0, 0x0) 02:29:28 executing program 4: 02:29:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:29 executing program 3: 02:29:29 executing program 5: 02:29:29 executing program 4: 02:29:29 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080), 0x0, 0x0) 02:29:29 executing program 5: 02:29:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:29 executing program 3: 02:29:29 executing program 4: 02:29:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:29 executing program 5: 02:29:29 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 02:29:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:29 executing program 4: 02:29:29 executing program 3: 02:29:29 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 02:29:29 executing program 5: 02:29:30 executing program 4: 02:29:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:30 executing program 5: 02:29:30 executing program 3: 02:29:30 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 02:29:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 02:29:30 executing program 4: 02:29:30 executing program 0: 02:29:30 executing program 3: 02:29:30 executing program 5: 02:29:30 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1, 0x0) 02:29:30 executing program 4: 02:29:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:30 executing program 3: 02:29:30 executing program 5: 02:29:30 executing program 0: 02:29:30 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1, 0x0) 02:29:30 executing program 3: 02:29:31 executing program 4: 02:29:31 executing program 5: 02:29:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:31 executing program 0: 02:29:31 executing program 3: 02:29:31 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/userio\x00', 0x8082, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1, 0x0) 02:29:31 executing program 5: 02:29:31 executing program 4: 02:29:31 executing program 0: 02:29:31 executing program 5: 02:29:31 executing program 1: 02:29:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:31 executing program 0: 02:29:31 executing program 3: 02:29:31 executing program 4: 02:29:31 executing program 5: 02:29:32 executing program 3: 02:29:32 executing program 0: 02:29:32 executing program 4: 02:29:32 executing program 1: 02:29:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, 0x0, 0x0, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:32 executing program 5: 02:29:32 executing program 3: 02:29:32 executing program 0: 02:29:32 executing program 4: 02:29:32 executing program 5: 02:29:32 executing program 1: 02:29:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, 0x0, 0x0, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:32 executing program 3: 02:29:32 executing program 4: 02:29:32 executing program 5: 02:29:32 executing program 0: 02:29:32 executing program 1: 02:29:32 executing program 5: 02:29:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, 0x0, 0x0, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:33 executing program 4: 02:29:33 executing program 3: 02:29:33 executing program 0: 02:29:33 executing program 1: 02:29:33 executing program 5: 02:29:33 executing program 4: 02:29:33 executing program 3: 02:29:33 executing program 0: 02:29:33 executing program 1: 02:29:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:33 executing program 5: 02:29:33 executing program 3: 02:29:33 executing program 4: 02:29:33 executing program 0: 02:29:33 executing program 1: 02:29:34 executing program 5: 02:29:34 executing program 4: 02:29:34 executing program 3: 02:29:34 executing program 0: 02:29:34 executing program 5: 02:29:34 executing program 1: 02:29:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:34 executing program 4: 02:29:34 executing program 5: 02:29:34 executing program 0: 02:29:34 executing program 3: 02:29:34 executing program 1: 02:29:34 executing program 4: 02:29:34 executing program 0: 02:29:34 executing program 3: 02:29:34 executing program 5: 02:29:34 executing program 1: 02:29:34 executing program 4: 02:29:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:35 executing program 5: 02:29:35 executing program 4: 02:29:35 executing program 1: 02:29:35 executing program 3: 02:29:35 executing program 0: 02:29:35 executing program 4: 02:29:35 executing program 5: 02:29:35 executing program 3: 02:29:35 executing program 1: 02:29:35 executing program 0: 02:29:35 executing program 4: 02:29:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:35 executing program 5: 02:29:35 executing program 3: 02:29:35 executing program 0: 02:29:35 executing program 1: 02:29:35 executing program 4: 02:29:36 executing program 0: 02:29:36 executing program 3: 02:29:36 executing program 1: 02:29:36 executing program 4: 02:29:36 executing program 5: 02:29:36 executing program 1: 02:29:36 executing program 0: 02:29:36 executing program 3: 02:29:36 executing program 4: 02:29:36 executing program 1: 02:29:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:36 executing program 5: 02:29:36 executing program 3: 02:29:36 executing program 0: 02:29:36 executing program 4: 02:29:36 executing program 5: 02:29:36 executing program 1: 02:29:37 executing program 0: 02:29:37 executing program 5: 02:29:37 executing program 1: 02:29:37 executing program 4: 02:29:37 executing program 3: 02:29:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:37 executing program 5: 02:29:37 executing program 0: 02:29:37 executing program 1: 02:29:37 executing program 3: 02:29:37 executing program 4: 02:29:37 executing program 3: 02:29:37 executing program 1: 02:29:37 executing program 4: 02:29:37 executing program 0: 02:29:37 executing program 5: 02:29:38 executing program 4: 02:29:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:38 executing program 1: 02:29:38 executing program 3: 02:29:38 executing program 0: 02:29:38 executing program 5: 02:29:38 executing program 4: 02:29:38 executing program 5: 02:29:38 executing program 3: 02:29:38 executing program 4: 02:29:38 executing program 1: 02:29:38 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a53669"], 0x1, 0x0, 0x0) 02:29:38 executing program 5: 02:29:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:38 executing program 3: 02:29:38 executing program 1: 02:29:38 executing program 4: 02:29:38 executing program 0: 02:29:39 executing program 5: 02:29:39 executing program 3: 02:29:39 executing program 4: 02:29:39 executing program 1: 02:29:39 executing program 0: 02:29:39 executing program 4: 02:29:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) 02:29:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xfd6f) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c000000240000000700000096a9c0ccf3dec7e6ac0000000077d38a00de28cf19c63ccb117f31c36d84f8d97127debea037540b7e64543662705e1e05b2fc0c9fe03e4d1f2709b3295046914eb629c10c46395cbcba8cb06761362a9353a5ee860255111f68ad76b7d0d43c2d92e207ea634cc6cb1c0d43821935"], 0x0, 0x87}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x8000000000001, 0x70, 0x999a, 0x3dd, 0x559, 0x4, 0x0, 0xa2b, 0x0, 0x1, 0x6d63, 0x0, 0x0, 0x9, 0x61ef, 0x0, 0x0, 0x7, 0x1, 0x3, 0x1000, 0x749, 0xfffffffffffff6cf, 0xd79d, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0xff, 0x3, 0x6, 0x80000001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14a02, 0x0, 0xfffffffffffffc00, 0x0, 0xfffffffffffffff9, 0x0, 0xe6f}, 0x0, 0xe, r1, 0xb) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x1404) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) socketpair(0x2, 0x7, 0xef3, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x0, 0x0) 02:29:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:39 executing program 4: 02:29:39 executing program 0: 02:29:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @link_local, [{[], {0x8100, 0x0, 0x7}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @dev, @multicast2, @remote, @empty}}}}, 0x0) 02:29:39 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000200), 0xffffffffffffff46, 0x0, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0x2000080000000, 0x6) [ 736.712417] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:29:39 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x7f}}) 02:29:39 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x800000000015) 02:29:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x20, 0x0, &(0x7f0000000600)=[@increfs_done={0x40106308, 0x0, 0x1}, @dead_binder_done], 0xa7, 0x0, &(0x7f0000000500)="d8bef687fb87f831e65211e31af5e165cb4b3acf317470b1c3e1409358167d138d5a4f7bc98b096d50d6ce8aedcbc013d91abc268ad74a6173883d4eadbc520dc058ed2cdca080409328c3ca0f68b36ae048185f2f714df56f42ce7fe8bd60cfa91deef43c65f74d6cfefbd308baae02cba659b5819dccfd6a8a745799f60c0cc8bf1c4651da8dfca8ec5b0b94d13c80b81f8560890f7c74b28c96002ff288c8b5661f2ae7baa6"}) 02:29:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="26000000130047f10701c1b00e000002000000000100000009ef38ffff00f13a050003002fc9", 0x26) [ 737.206242] binder: 23008:23010 BC_INCREFS_DONE u0000000000000000 no match [ 737.213633] binder: 23008:23010 BC_DEAD_BINDER_DONE 0000000000000000 not found 02:29:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) 02:29:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 02:29:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 02:29:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-384-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:29:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffefe, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000180)="8f", 0x1, 0x0, 0x0, 0x0) 02:29:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:41 executing program 1: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x0, 0x0, 0xd6, 0x0, 0x1, r0}]) 02:29:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffffffffffd68}, 0x103}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001a0025d1", 0x8) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 02:29:41 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x800000000015) 02:29:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000800)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, 0x4}) 02:29:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 02:29:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0xc, 0x209e20, 0x8000000001, 0x1, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:29:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) 02:29:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 02:29:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) 02:29:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) connect$inet(r1, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000003c0)={@multicast2, @local, 0x1}, 0x10) 02:29:42 executing program 1: r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 02:29:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 02:29:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = dup2(r0, r1) ioctl$sock_ifreq(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000180)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000003c0), 0x4) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) 02:29:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2}) 02:29:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:42 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x800000000015) [ 739.532470] cgroup: fork rejected by pids controller in /syz3 02:29:42 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@random="b100485caa2a", @link_local={0x1, 0x80, 0xc2, 0x806}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 02:29:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:42 executing program 0: listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 02:29:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1}, 0x4) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa645be9818f64861d080045000024000000000000907800110000e0000001000000000417a7eed9a0af3bf9bbd401907800d7050200f53475"], 0x0) 02:29:43 executing program 0: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x324eb91db45c519f, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="df"], 0x1, 0x0) 02:29:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:43 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', 0x0, 0x31800, 0x0) clone(0x1002000210a, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 02:29:43 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x800000000015) 02:29:43 executing program 1: 02:29:44 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0) 02:29:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:44 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:29:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:45 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) msgget$private(0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000040)) 02:29:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000007000000000000000060cd16"], 0x18}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 02:29:45 executing program 5: socketpair$unix(0x1, 0x10000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 02:29:45 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 02:29:45 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x12b, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 02:29:45 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="24000000520007031dfffd946fa283000a200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 02:29:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000011, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x0, 0x9ffc}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 02:29:46 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x12b, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x3, 0x4e21, 0x8}}}}}, 0x0) 02:29:46 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) gettid() [ 744.335475] IPVS: ftp: loaded support on port[0] = 21 [ 744.602032] chnl_net:caif_netlink_parms(): no params data found [ 744.639010] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.645527] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.654178] device bridge_slave_0 entered promiscuous mode [ 744.662178] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.668613] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.676523] device bridge_slave_1 entered promiscuous mode [ 744.706440] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 744.814349] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 744.836260] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 744.844282] team0: Port device team_slave_0 added [ 744.850076] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 744.858766] team0: Port device team_slave_1 added [ 744.864504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 744.872851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 744.924263] device hsr_slave_0 entered promiscuous mode [ 745.002477] device hsr_slave_1 entered promiscuous mode [ 745.170689] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 745.177986] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 745.197900] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.204413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.211224] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.217877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.379359] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 745.385656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.398541] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 745.411020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 745.420335] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.427629] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.436041] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 745.557018] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 745.563306] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.575374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 745.583495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.592127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.600181] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.606744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.619787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 745.627265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 745.636088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 745.644578] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.651065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.778206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 745.785281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 745.797965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 745.805584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 745.818983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 745.826684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 745.835553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.844818] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 745.857999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 745.865040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.874541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.939525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 745.947464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 745.955859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 745.968422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 745.976494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 745.985042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.999195] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 746.005938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 746.054643] device bridge_slave_1 left promiscuous mode [ 746.060280] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.103799] device bridge_slave_0 left promiscuous mode [ 746.109443] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.794719] device hsr_slave_1 left promiscuous mode [ 748.856510] device hsr_slave_0 left promiscuous mode [ 748.915573] team0 (unregistering): Port device team_slave_1 removed [ 748.927454] team0 (unregistering): Port device team_slave_0 removed [ 748.937710] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 748.985942] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 749.064310] bond0 (unregistering): Released all slaves [ 749.142069] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 749.164331] 8021q: adding VLAN 0 to HW filter on device batadv0 02:29:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:52 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) sendfile(r1, r0, 0x0, 0x2000006) 02:29:52 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) gettid() 02:29:52 executing program 5: clone(0x140200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x43, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) execve(&(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:29:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x1bd, &(0x7f0000002b80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 02:29:52 executing program 0: 02:29:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)) 02:29:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:52 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f00000000c0)=""/203, 0xcb) 02:29:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) 02:29:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") readv(r0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) 02:29:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unlinkat(0xffffffffffffffff, 0x0, 0x400208) 02:29:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:53 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:29:53 executing program 0: socket$inet6(0xa, 0x6, 0x106) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x2844, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000250000000300000000000000020000000100000004000000000000000200000000000000000000000000000000000000000000000000000000000000000000008b000000030000000000000000000000000000000180000000"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x1e06d73802273095) fcntl$setflags(r3, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/44, 0x2c) dup(0xffffffffffffffff) rt_sigpending(&(0x7f00000001c0), 0x8) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/30) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x1, 0x3, 0x8000, 0x355}]}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ftruncate(0xffffffffffffffff, 0xffffffff00000001) 02:29:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:29:53 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:53 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 02:29:54 executing program 3: creat(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:54 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/dev/zero\x00'}, 0x30) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x120000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x4000010) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 02:29:54 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = inotify_init() dup2(r1, r0) 02:29:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:29:54 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() dup(r0) tkill(r1, 0x26) 02:29:54 executing program 3: creat(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) [ 751.485449] print_req_error: 88 callbacks suppressed [ 751.485469] print_req_error: I/O error, dev loop0, sector 0 [ 751.496535] buffer_io_error: 86 callbacks suppressed [ 751.496557] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 751.509591] print_req_error: I/O error, dev loop0, sector 8 [ 751.515426] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 751.523269] print_req_error: I/O error, dev loop0, sector 16 [ 751.529116] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 751.537105] print_req_error: I/O error, dev loop0, sector 24 [ 751.543042] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 751.550793] print_req_error: I/O error, dev loop0, sector 32 [ 751.556749] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 751.564558] print_req_error: I/O error, dev loop0, sector 40 [ 751.570406] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 751.578261] print_req_error: I/O error, dev loop0, sector 48 02:29:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) [ 751.584183] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 751.592114] print_req_error: I/O error, dev loop0, sector 56 [ 751.597964] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 751.605807] print_req_error: I/O error, dev loop0, sector 64 [ 751.611735] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 751.619469] print_req_error: I/O error, dev loop0, sector 72 [ 751.625424] Buffer I/O error on dev loop0, logical block 9, lost async page write 02:29:54 executing program 3: creat(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) 02:29:54 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() dup(r0) tkill(r1, 0x26) 02:29:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:29:55 executing program 0: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) getegid() 02:29:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:55 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:55 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x120000) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x2000005) sendmsg$TIPC_NL_BEARER_DISABLE(r0, 0x0, 0x4000010) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 02:29:55 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:55 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 02:29:55 executing program 1: 02:29:55 executing program 1: 02:29:55 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='dax\x00', 0x0, 0x0) 02:29:55 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() dup(r0) tkill(r1, 0x26) 02:29:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:56 executing program 5: 02:29:56 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1e82730120001c005f240fb050de13c329abda4bc4af019bd1ac1aab1182bc2a10b350f37b8d7d18fd9fff0f737081527e09c279b1c0bb7ada683e2f7db2cdbfd6b83e03f0e7fe7717576f046535b4a9073e8c03e4a685567ccebaefd74e4e5e788ea8b25a6d15fb1bbe9efc9a765fb86cdf94645a27482d0cc4a151a81231337755e287acb834ae8f69efa4bebdc27da65f56b525"], 0x95) sendfile(r2, r2, &(0x7f0000000140), 0x1ff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:29:56 executing program 1: mknod(&(0x7f00000009c0)='./file1\x00', 0x8011, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)) syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00c42221b888010000003e0f1110c442019dccd3196f") clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 02:29:56 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 02:29:56 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) tkill(r1, 0x26) 02:29:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) 02:29:56 executing program 0: 02:29:56 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 02:29:56 executing program 0: 02:29:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:56 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 02:29:57 executing program 5: 02:29:57 executing program 0: 02:29:57 executing program 3: [ 754.124231] cgroup: fork rejected by pids controller in /syz1 02:29:57 executing program 5: 02:29:57 executing program 1: mknod(&(0x7f00000009c0)='./file1\x00', 0x8011, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)) syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00c42221b888010000003e0f1110c442019dccd3196f") clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 02:29:57 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) tkill(r1, 0x26) 02:29:57 executing program 0: 02:29:57 executing program 3: 02:29:57 executing program 1: mknod(&(0x7f00000009c0)='./file1\x00', 0x8011, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)) syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00c42221b888010000003e0f1110c442019dccd3196f") clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 02:29:57 executing program 5: 02:29:57 executing program 0: 02:29:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:57 executing program 3: 02:29:57 executing program 5: 02:29:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:29:58 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000967000006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 02:29:58 executing program 1: mknod(&(0x7f00000009c0)='./file1\x00', 0x8011, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)) syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00c42221b888010000003e0f1110c442019dccd3196f") clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) [ 755.167914] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. [ 755.219665] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 02:29:58 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) tkill(r1, 0x26) 02:29:58 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 02:29:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010400000000060000000a0000100000600845715576a911a01f00000000000014000500fe9f00000000bb6e25e9b77267f940f5c3e397009e972e1dc5966b3dc837a8f289f246607e49c297283016cd69d096ef27486722b5829534713e0be032c0cc45f84eefdebb2e42d9cb0f3fcf485fad7eaf50db0cfd92a4efd49aef5dfd4ac8cc8cff958d562f926bb3b06e4a789ef16388f1a27579c4528ecab0ba608f14e83357c5a16714c6caf26fdf0beba19d58f1bae7168bff7731a846c304313709544155ba2c97fda17b"], 0x1}}, 0x0) 02:29:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:29:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)) dup(0xffffffffffffffff) 02:29:59 executing program 1: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a0189668bb3", 0x15}], 0x1) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="b0c823c245ec0a38"], 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 02:29:59 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:29:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xeffdffff, 0x0, 0x0, 0x0) 02:29:59 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) tkill(0x0, 0x26) 02:29:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(0x0, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:29:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @dev}, &(0x7f0000000040)=0xc) 02:30:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) 02:30:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:30:00 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:01 executing program 5: r0 = socket$inet6(0xa, 0x800000100000002, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x0) 02:30:01 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:02 executing program 1: r0 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffe43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 02:30:02 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) 02:30:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:30:02 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_ABSBIT(r0, 0xc018620b, 0x0) 02:30:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 02:30:02 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) [ 759.137617] binder: 23681:23683 ioctl c018620b 0 returned -14 02:30:02 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 02:30:02 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f5f09f62a319bc070") setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 02:30:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 02:30:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:30:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 02:30:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 02:30:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b93c564b63ff2d3822e13030e96700000000b4ce360000a2", 0x18) 02:30:03 executing program 5: r0 = socket$inet6(0xa, 0x800000100000002, 0x0) sendmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20, @dev}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0xc}], 0xc}, 0x4}], 0x1, 0x0) 02:30:03 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:30:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000380)) getegid() getresgid(0x0, 0x0, 0x0) 02:30:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xfffffffffffffffb) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x805) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000100), 0x2be, 0x2) 02:30:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(0xffffffffffffffff, r0, 0x0) 02:30:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_ABSBIT(r0, 0xc0306201, 0x0) 02:30:03 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) [ 760.556216] binder: 23760:23763 ioctl c0306201 0 returned -14 02:30:03 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f5f09f62a319bc070") setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 02:30:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) 02:30:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$binfmt_misc(r1, 0x0, 0x0) 02:30:04 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000101000000000000010000000000000002"]) 02:30:04 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) [ 761.737224] cgroup: fork rejected by pids controller in /syz4 02:30:05 executing program 0: r0 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffe43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) [ 762.339199] cgroup: fork rejected by pids controller in /syz0 02:30:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)='N', 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) 02:30:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$binfmt_misc(r1, 0x0, 0x0) 02:30:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$binfmt_misc(r1, 0x0, 0x0) 02:30:17 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) poll(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) clock_gettime(0x5, &(0x7f0000000180)={0x0, 0x0}) setresgid(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) 02:30:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) 02:30:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fchdir(r0) dup3(r0, r0, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) r2 = timerfd_create(0x0, 0x80800) read(r2, &(0x7f0000a16000)=""/71, 0x2c9) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) wait4(0x0, 0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x7c, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 02:30:18 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 02:30:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 02:30:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') lseek(r0, 0x0, 0x0) 02:30:19 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000340), 0x334, 0x0) 02:30:19 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f0000000340), 0x334, 0x100000000000000) 02:30:19 executing program 2: socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 02:30:19 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r0, 0xffffffffffffffff, 0x0) 02:30:19 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 776.585814] binder: BINDER_SET_CONTEXT_MGR already set [ 776.591240] binder: 23868:23870 ioctl 40046207 0 returned -16 02:30:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x80800) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/204, 0xcc}, {&(0x7f0000000980)}, {0x0}, {&(0x7f0000000bc0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/212, 0xd4}], 0x5, &(0x7f0000000dc0)=""/84, 0x54}, 0x5}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001180)=""/12, 0xc}, {&(0x7f00000011c0)=""/153, 0x99}, {0x0}, {&(0x7f0000001300)=""/123, 0x7b}, {0x0}], 0x5, &(0x7f00000014c0)}, 0x10001}, {{&(0x7f0000001500)=@xdp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001580)=""/72, 0x48}, {&(0x7f0000001600)=""/25, 0x19}, {&(0x7f0000001640)=""/127, 0x7f}, {&(0x7f0000001740)=""/91, 0x5b}], 0x4, &(0x7f0000001840)=""/15, 0xf}, 0x5395}], 0x4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x7c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 02:30:19 executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1, &(0x7f0000000780)=""/103, 0x67}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/204, 0xcc}, {&(0x7f0000000980)}, {&(0x7f0000000a80)=""/197, 0xc5}, {0x0}, {0x0}], 0x5, &(0x7f0000000dc0)=""/84, 0x54}, 0x5}, {{&(0x7f0000001500)=@xdp, 0x80, 0x0}}], 0x3, 0x40000101, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0xfffffefe) gettid() r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x7c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 02:30:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x7c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 02:30:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) [ 777.642150] input: syz0 as /devices/virtual/input/input24 [ 777.674525] input: syz0 as /devices/virtual/input/input25 [ 777.706006] IPVS: ftp: loaded support on port[0] = 21 02:30:20 executing program 5: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') [ 778.287638] IPVS: ftp: loaded support on port[0] = 21 [ 778.436083] IPVS: ftp: loaded support on port[0] = 21 [ 779.083001] chnl_net:caif_netlink_parms(): no params data found [ 779.123471] chnl_net:caif_netlink_parms(): no params data found [ 779.156653] chnl_net:caif_netlink_parms(): no params data found [ 779.281136] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.287742] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.296199] device bridge_slave_0 entered promiscuous mode [ 779.315052] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.321728] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.329969] device bridge_slave_1 entered promiscuous mode [ 779.384418] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 779.425501] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 779.433489] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.439983] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.447643] device bridge_slave_0 entered promiscuous mode [ 779.466307] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.472907] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.481122] device bridge_slave_1 entered promiscuous mode [ 779.497081] device bridge_slave_1 left promiscuous mode [ 779.503037] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.582700] device bridge_slave_0 left promiscuous mode [ 779.588302] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.533635] device hsr_slave_1 left promiscuous mode [ 782.575181] device hsr_slave_0 left promiscuous mode [ 782.615454] team0 (unregistering): Port device team_slave_1 removed [ 782.626168] team0 (unregistering): Port device team_slave_0 removed [ 782.638142] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 782.677192] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 782.764791] bond0 (unregistering): Released all slaves [ 782.835670] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 782.845550] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.852263] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.859686] device bridge_slave_0 entered promiscuous mode [ 782.871347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 782.880239] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 782.888615] team0: Port device team_slave_0 added [ 782.895171] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 782.903973] team0: Port device team_slave_1 added [ 782.909333] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.916045] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.924391] device bridge_slave_1 entered promiscuous mode [ 782.941224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 782.985005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 782.995619] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 783.007066] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 783.021923] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 783.030591] team0: Port device team_slave_0 added [ 783.056818] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 783.065547] team0: Port device team_slave_1 added [ 783.125775] device hsr_slave_0 entered promiscuous mode [ 783.162292] device hsr_slave_1 entered promiscuous mode [ 783.203083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 783.211699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 783.219867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 783.228737] team0: Port device team_slave_0 added [ 783.245117] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 783.253474] team0: Port device team_slave_1 added [ 783.259268] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 783.266871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 783.318660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 783.327257] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 783.386270] device hsr_slave_0 entered promiscuous mode [ 783.582449] device hsr_slave_1 entered promiscuous mode [ 783.630208] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 783.658042] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 783.705530] device hsr_slave_0 entered promiscuous mode [ 783.742002] device hsr_slave_1 entered promiscuous mode [ 783.804557] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 783.811704] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 783.847537] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 783.875117] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 783.917371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 783.986401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.004383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 784.016922] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 784.030125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 784.038053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 784.052373] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 784.058521] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.105676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 784.114909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 784.123796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 784.132274] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.138776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.157046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 784.165244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 784.173172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 784.181820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 784.190090] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.196661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.216272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 784.233766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 784.248825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.256985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 784.266210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 784.278370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 784.286287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 784.295492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 784.314401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 784.322349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 784.330523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 784.339591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 784.356769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 784.364247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 784.372666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 784.387071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 784.400030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 784.408600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 784.419681] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 784.430178] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 784.436824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 784.453772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.470561] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 784.483790] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 784.496795] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 784.510067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 784.518779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 784.526109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 784.533944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 784.551318] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 784.558552] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.570498] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 784.579656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 784.590482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 784.599260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 784.607556] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.614632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.631961] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 784.638056] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.647647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 784.655135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 784.664046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 784.672681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 784.680760] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.687311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.700503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.712666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 784.722351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 784.731001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 784.739356] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.745934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.962538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 784.973881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 784.984879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 784.992324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 785.001040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 785.010551] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.017106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.024817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 785.042364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 785.053193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 785.083374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 785.091413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 785.100776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 785.110082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 785.317635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 785.325639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 785.334804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 785.349608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 785.362171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 785.374179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 785.382511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 785.391745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 785.400125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 785.409409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 785.528653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 785.538630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 785.546913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 785.555270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 785.564363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 785.573221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 785.581712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 785.594591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 785.710070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.722100] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 785.728139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 785.736046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 785.744318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 785.871398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 785.878846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 785.887328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 785.909701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 785.917923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 785.926455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 786.043968] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 786.060358] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 786.066483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 786.086199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.241354] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 786.426975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.672556] device bridge_slave_1 left promiscuous mode [ 786.678248] bridge0: port 2(bridge_slave_1) entered disabled state 02:30:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00\x00\x00\x1b\x00\x05\x00\x00\x00\x00\x00\x00\x03\x00', 0x20000014ffe}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, 0x0, 0x0) 02:30:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) r2 = timerfd_create(0x0, 0x80800) read(r2, &(0x7f0000a16000)=""/71, 0x2c9) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) wait4(0x0, 0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x7c, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 02:30:29 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f0000d1df52)=""/174) 02:30:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:29 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)='J', 0x1}], 0x1) [ 786.722753] device bridge_slave_0 left promiscuous mode [ 786.728480] bridge0: port 1(bridge_slave_0) entered disabled state 02:30:29 executing program 0: 02:30:30 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:30 executing program 0: geteuid() openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x202000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0xfffffe77) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000014) 02:30:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0xfffffe77) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) creat(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000014) 02:30:30 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:30 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) [ 790.903632] device hsr_slave_1 left promiscuous mode [ 790.945109] device hsr_slave_0 left promiscuous mode [ 791.005548] team0 (unregistering): Port device team_slave_1 removed [ 791.017669] team0 (unregistering): Port device team_slave_0 removed [ 791.028123] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 791.085885] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 791.155536] bond0 (unregistering): Released all slaves [ 791.253374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 791.302479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 791.326052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 791.372869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:30:34 executing program 5: r0 = socket$inet6(0xa, 0x1000400000002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'team_slave_0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 02:30:34 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:34 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/dev/zero\x00', r0}, 0x30) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x120000) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000005) sendmsg$TIPC_NL_BEARER_DISABLE(r1, 0x0, 0x4000010) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0), 0xc) 02:30:34 executing program 2: 02:30:34 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x3}) 02:30:34 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) [ 791.747126] print_req_error: 250 callbacks suppressed [ 791.747147] print_req_error: I/O error, dev loop0, sector 0 [ 791.758458] buffer_io_error: 250 callbacks suppressed [ 791.758475] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 791.772369] print_req_error: I/O error, dev loop0, sector 8 [ 791.778149] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 791.786032] print_req_error: I/O error, dev loop0, sector 16 02:30:34 executing program 1: [ 791.791979] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 791.799742] print_req_error: I/O error, dev loop0, sector 24 [ 791.805709] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 791.813549] print_req_error: I/O error, dev loop0, sector 32 [ 791.819419] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 791.827294] print_req_error: I/O error, dev loop0, sector 40 [ 791.833246] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 791.840999] print_req_error: I/O error, dev loop0, sector 48 [ 791.846972] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 791.854766] print_req_error: I/O error, dev loop0, sector 56 [ 791.860612] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 791.868416] print_req_error: I/O error, dev loop0, sector 64 [ 791.874318] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 791.882130] print_req_error: I/O error, dev loop0, sector 72 [ 791.887984] Buffer I/O error on dev loop0, logical block 9, lost async page write 02:30:35 executing program 2: 02:30:35 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) read(0xffffffffffffffff, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r0 = gettid() r1 = dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) tkill(r0, 0x26) 02:30:35 executing program 1: 02:30:35 executing program 0: 02:30:35 executing program 5: 02:30:35 executing program 2: 02:30:35 executing program 1: 02:30:35 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) read(0xffffffffffffffff, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r0 = gettid() r1 = dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) tkill(r0, 0x26) 02:30:35 executing program 0: 02:30:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:35 executing program 2: 02:30:35 executing program 0: 02:30:35 executing program 1: 02:30:35 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) read(0xffffffffffffffff, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r0 = gettid() r1 = dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) tkill(r0, 0x26) 02:30:36 executing program 5: 02:30:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:36 executing program 0: 02:30:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:36 executing program 2: 02:30:36 executing program 1: 02:30:36 executing program 5: 02:30:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:36 executing program 0: 02:30:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:36 executing program 2: 02:30:36 executing program 5: 02:30:36 executing program 1: 02:30:36 executing program 2: 02:30:36 executing program 0: 02:30:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:37 executing program 5: 02:30:37 executing program 1: 02:30:37 executing program 2: 02:30:37 executing program 0: 02:30:37 executing program 5: 02:30:37 executing program 4: timer_create(0x0, 0x0, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:37 executing program 5: 02:30:37 executing program 2: 02:30:37 executing program 1: 02:30:37 executing program 0: 02:30:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:37 executing program 5: 02:30:37 executing program 1: 02:30:37 executing program 0: 02:30:37 executing program 2: 02:30:38 executing program 5: 02:30:38 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:38 executing program 1: 02:30:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:38 executing program 2: 02:30:38 executing program 5: 02:30:38 executing program 0: 02:30:38 executing program 2: 02:30:38 executing program 1: 02:30:38 executing program 0: 02:30:38 executing program 5: 02:30:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:38 executing program 0: 02:30:39 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:39 executing program 5: 02:30:39 executing program 1: 02:30:39 executing program 2: 02:30:39 executing program 0: 02:30:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:39 executing program 2: 02:30:39 executing program 1: 02:30:39 executing program 0: 02:30:39 executing program 5: 02:30:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, r0, 0x0) 02:30:39 executing program 5: 02:30:39 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:39 executing program 1: 02:30:39 executing program 2: 02:30:39 executing program 0: 02:30:39 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:39 executing program 5: 02:30:39 executing program 1: 02:30:39 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) dup3(r1, r0, 0x0) 02:30:39 executing program 5: 02:30:39 executing program 0: 02:30:40 executing program 1: 02:30:40 executing program 2: 02:30:40 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:40 executing program 0: 02:30:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) dup3(r1, r0, 0x0) 02:30:40 executing program 5: 02:30:40 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:40 executing program 2: 02:30:40 executing program 1: 02:30:40 executing program 0: 02:30:40 executing program 5: 02:30:40 executing program 0: 02:30:40 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:40 executing program 2: 02:30:40 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000200)="ec", 0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xfffffffffffffffb) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:30:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) dup3(r1, r0, 0x0) 02:30:40 executing program 1: timerfd_gettime(0xffffffffffffffff, 0x0) 02:30:40 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:40 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) clone(0xc02102000ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x3, 0x0, 0x0, 0x20}]}) 02:30:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 02:30:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040), 0x10) syz_genetlink_get_family_id$ipvs(0x0) 02:30:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00'}) dup3(r1, r0, 0x0) 02:30:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x24000010004002) ioctl$BLKSECDISCARD(r0, 0x1277, 0x0) 02:30:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:30:41 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00'}) dup3(r1, r0, 0x0) [ 798.127948] input: syz0 as /devices/virtual/input/input26 [ 798.206913] input: syz0 as /devices/virtual/input/input27 [ 798.412406] protocol 88fb is buggy, dev hsr_slave_0 [ 798.418051] protocol 88fb is buggy, dev hsr_slave_1 02:30:41 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000180)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 02:30:41 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @local, 0x0, 0x0, 'fo\x00', 0x0, 0x0, 0x100003f00}, 0x20e) 02:30:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00'}) dup3(r1, r0, 0x0) 02:30:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x234, 0x0, 0x0}) 02:30:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 798.590474] binder: 24234:24239 ioctl c018620c 20000180 returned -1 [ 798.652227] protocol 88fb is buggy, dev hsr_slave_0 [ 798.657905] protocol 88fb is buggy, dev hsr_slave_1 [ 798.972673] protocol 88fb is buggy, dev hsr_slave_0 [ 798.978529] protocol 88fb is buggy, dev hsr_slave_1 [ 798.984664] protocol 88fb is buggy, dev hsr_slave_0 [ 798.990422] protocol 88fb is buggy, dev hsr_slave_1 [ 799.292376] protocol 88fb is buggy, dev hsr_slave_0 [ 799.298141] protocol 88fb is buggy, dev hsr_slave_1 [ 803.452337] net_ratelimit: 26 callbacks suppressed [ 803.452356] protocol 88fb is buggy, dev hsr_slave_0 [ 803.463053] protocol 88fb is buggy, dev hsr_slave_1 [ 803.468862] protocol 88fb is buggy, dev hsr_slave_0 [ 803.474537] protocol 88fb is buggy, dev hsr_slave_1 [ 803.532332] protocol 88fb is buggy, dev hsr_slave_0 [ 803.537985] protocol 88fb is buggy, dev hsr_slave_1 [ 804.652298] protocol 88fb is buggy, dev hsr_slave_0 [ 804.657966] protocol 88fb is buggy, dev hsr_slave_1 02:30:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x1268, 0x0) 02:30:47 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a"], 0x1, 0x0, 0x0) 02:30:47 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(0xffffffffffffffff, r0, 0x0) 02:30:47 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16ea) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5395797165ca5688fde9fb753c0a4ba39ecb17d7e77f91ce9d89f8cffaaa4fc977a55a1497e5808365cea47d7c1513f030a7db82cf8cdb2e06191bd7869c763f9c5d3a3ac9797d1201605cb3c72ecdbadbe9e3801150fae50441e3351f751f34d998b1c8a9c4817f6bbd999c13f9e796df9302828f7fd946bc90a59a3ea73dfab576c4fd3de3853e157c3adcd3ee77f230ccebe57b1a3a773be196cf6726591bbdd4cc57b6ddbcd2c0f13d23ddf80d803a6d0327234710f66"], 0xb9}, 0x0) 02:30:47 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753240371707ce958005241b6d46a627c32000000"], 0x1, 0x0, 0x0) 02:30:47 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b29a453bc85247288788994dbf3758b5"], 0x1a}, 0x0) 02:30:47 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b2"], 0xb}, 0x0) 02:30:47 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16ea) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5395797165ca5688fde9fb753c0a4ba39ecb17d7e77f91ce9d89f8cffaaa4fc977a55a1497e5808365cea47d7c1513f030a7db82cf8cdb2e06191bd7869c763f9c5d3a3ac9797d1201605cb3c72ecdbadbe9e3801150fae50441e3351f751f34d998b1c8a9c4817f6bbd999c13f9e796df9302828f7fd946bc90a59a3ea73dfab576c4fd3de3853e157c3adcd3ee77f230ccebe57b1a3a773be196cf6726591bbdd4cc57b6ddbcd2c0f13d23ddf80d803a6d0327234710f66ebc83ed3e4bd1e76d0fcddd596e367a0d13e584ce7899edf5a"], 0xd2}, 0x0) 02:30:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:30:48 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) dup3(r1, 0xffffffffffffffff, 0x0) 02:30:48 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000580)='./file0\x00') ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ptrace(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) 02:30:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x220080, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) syslog(0x2, &(0x7f0000000080)=""/151, 0x97) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) poll(&(0x7f0000000040)=[{r2, 0x408}, {r2, 0x4004}, {r1, 0x4004}, {r2, 0x100}], 0x4, 0xbe0) r3 = fcntl$dupfd(r2, 0x406, r1) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=""/126, &(0x7f00000001c0)=0x7e) close(r1) 02:30:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0f\x82U~\xf9\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') 02:30:48 executing program 1: rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f00000002c0)) 02:30:48 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 02:30:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x20, 0x1001) clock_gettime(0x0, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x7, 0x2, 0x2}, {{0x77359400}, 0x11, 0x400}, {{}, 0x11, 0x5}], 0x48) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)) 02:30:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x1000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x7, 0x100082) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f00000008c0)=[{&(0x7f0000000800)="55c18e8b38add1d45b1e3b79d2e29dbe676b", 0x12}], 0x1, 0x81806) sync_file_range(0xffffffffffffffff, 0x20000000, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) eventfd(0x7f) ioctl$LOOP_CLR_FD(r1, 0x4c01) getegid() 02:30:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:sound_device_t:s0\x00', 0x24, 0x0) 02:30:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x1000) 02:30:48 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:48 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x6) poll(&(0x7f0000000140)=[{r2}], 0x1, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) close(r1) 02:30:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x1000) [ 805.795102] print_req_error: 120 callbacks suppressed [ 805.795124] print_req_error: I/O error, dev loop7, sector 144 [ 805.806553] buffer_io_error: 120 callbacks suppressed [ 805.806575] Buffer I/O error on dev loop7, logical block 18, lost async page write 02:30:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) 02:30:49 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x4000000) 02:30:49 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x0, 0x0, 0xffffffffffffff06) 02:30:49 executing program 2: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000140)='./file0\x00', 0xffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 806.183327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:30:49 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r0, 0x400000000000001) 02:30:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$negate(0xd, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0x100000073) 02:30:49 executing program 0: pipe2(&(0x7f0000000080), 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 02:30:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:30:49 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @loopback, @empty, 0x3, 0x0, 0x0, 0x800000000113}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 02:30:49 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) [ 806.804077] input: syz0 as /devices/virtual/input/input28 [ 806.905744] input: syz0 as /devices/virtual/input/input29 [ 806.985945] ptrace attach of "/root/syz-executor1"[24404] was attempted by "/root/syz-executor1"[24405] 02:30:50 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 02:30:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 02:30:50 executing program 5: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x531) close(r0) 02:30:50 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x2) 02:30:50 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:50 executing program 2: readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 02:30:50 executing program 0: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) close(r0) 02:30:50 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) 02:30:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 02:30:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) 02:30:51 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x1000) 02:30:51 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/mnt\x00') 02:30:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:30:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) 02:30:51 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:30:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2}) 02:30:51 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1/file1\x00') 02:30:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:30:51 executing program 3: 02:30:51 executing program 2: 02:30:52 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) [ 808.945725] input: syz1 as /devices/virtual/input/input30 02:30:52 executing program 3: 02:30:52 executing program 2: 02:30:52 executing program 5: 02:30:52 executing program 1: 02:30:52 executing program 3: 02:30:52 executing program 2: 02:30:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2}) 02:30:52 executing program 5: 02:30:52 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:52 executing program 1: 02:30:52 executing program 2: 02:30:52 executing program 3: 02:30:52 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c45"], 0x1, 0x0, 0x0) 02:30:52 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b587022f3c1a70dfb4a7e42f4d969d348234aa28280e62eba139f5c6be7347a4f3d9a4f0bcd5a2e6e6af71f0e645ac7e492b0d04db34e30f6bc29154"], 0x1, 0x0, 0x0) 02:30:52 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2"], 0x1, 0x0, 0x0) 02:30:52 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff00"], 0x1, 0x0, 0x0) 02:30:52 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b5"], 0x1, 0x0, 0x0) 02:30:53 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e9"]]], 0x8}, 0x0) 02:30:53 executing program 0: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000180), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x4206, r0) ptrace(0x11, r0) 02:30:53 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 02:30:53 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:53 executing program 5: bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0xa6010000, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 02:30:53 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:30:53 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:30:53 executing program 5: 02:30:53 executing program 3: [ 810.515345] input: syz0 as /devices/virtual/input/input32 02:30:53 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:53 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:54 executing program 0: mknod(&(0x7f00000009c0)='./file1\x00', 0x8011, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 02:30:54 executing program 3: 02:30:54 executing program 5: 02:30:54 executing program 1: 02:30:54 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:54 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/178, 0xb2) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x3000) shmdt(0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$int_out(r0, 0x0, 0x0) semget(0xffffffffffffffff, 0x1, 0x300) semctl$SETALL(0x0, 0x0, 0x11, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000880)={0x7, 0x21, 0x1}, 0x7) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) 02:30:54 executing program 5: getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 02:30:54 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r0, 0x1, 0x2000, 0xfffffffffffff002}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x6, 0x1, "adae66a94efabd7a515227da8e265c3f7f565b11a22b5baa7f4892858b97a59cb771e0db02e6b33b31b481f3a0fe1486f0eb408b6c8e7d107199b006b49522a5", "98c4f98fa910c235893ff72ae637a07bce8f0e6c8b0be1a77564052aac3a70cc", [0x2]}) 02:30:54 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:54 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:54 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) fstatfs(r0, 0x0) 02:30:54 executing program 5: 02:30:54 executing program 1: 02:30:54 executing program 3: pipe(0x0) getpgid(0xffffffffffffffff) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x9, 0xfffffffffffeffff, 0x1ff, 0x6, 0x563b, 0x4, 0x8, 0x8000, 0x0, 0x7ff}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000740)={{0x2, 0x0, 0x400, 0x0, 0x6}, 0x0, 0x89c}) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xab11, 0x0) 02:30:54 executing program 2: r0 = socket$inet(0x10, 0x0, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) 02:30:54 executing program 0: r0 = gettid() epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lstat(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getresuid(0x0, 0x0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0), 0x0) futimesat(r1, &(0x7f0000000200)='./file0\x00', 0x0) getgroups(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) tkill(r0, 0x1000000000016) 02:30:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x901, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) 02:30:55 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:55 executing program 1: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 02:30:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x901, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) 02:30:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x44, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) 02:30:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6}}, 0xe8) 02:30:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:55 executing program 0: r0 = open(&(0x7f0000000000)='./file1\x00', 0x400043, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) close(r0) prctl$PR_GET_TIMERSLACK(0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f00)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000ec0)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000f00)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0xf52, 0x4e23, 0x9, 0x0, 0xa0}, {0x1, 0x10000, 0x1000, 0x0, 0x0, 0x6, 0x0, 0x9}, {0x4, 0x2, 0xc2b, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x4d2, 0x2b}, 0x2, @in=@broadcast, 0x3502, 0x0, 0x3, 0x2, 0x9, 0x6, 0x2}}, 0xe8) 02:30:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x901, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) 02:30:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x319}, 0x14}}, 0x0) 02:30:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e82}}) 02:30:56 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:56 executing program 2: socket$inet(0x10, 0x3, 0x200000000c) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:30:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x901, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) 02:30:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:30:56 executing program 1: r0 = epoll_create1(0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) close(r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = semget(0x2, 0x0, 0x22) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f0000000240)='blacklist\x00', 0x0, r3) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) getpid() 02:30:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x98) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) [ 813.134544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 02:30:56 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, 0x0, 0x0) 02:30:56 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x901, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) [ 813.207606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 02:30:56 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x3ffff, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) r2 = open(&(0x7f0000000100)='./file0\x00', 0x3ffd, 0x40) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r3 = msgget$private(0x0, 0x2) msgctl$IPC_RMID(r3, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x100000000, 0x102) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0x9208, 0xfffffdfd) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0x101, 0x5, 0x3, 0xc18}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e20, 0x401, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000}}, 0x6bd, 0x5, 0x3, 0x9, 0x42}, &(0x7f0000000380)=0x98) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000000005020000e4ff0000950000000000000000"], 0x0}, 0x48) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0) time(&(0x7f0000000780)) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000300)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000140)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r7, &(0x7f0000000540)={0x10}) fcntl$getownex(r8, 0x10, &(0x7f0000000500)={0x0, 0x0}) pread64(r9, &(0x7f0000000580)=""/60, 0x3c, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x430880, 0x0) kcmp(r10, r11, 0x2, r7, r6) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x100000000000000) write$P9_RLERRORu(r9, &(0x7f00000005c0)=ANY=[], 0x0) 02:30:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') 02:30:56 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) vmsplice(r1, &(0x7f0000001500)=[{&(0x7f0000001540)="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", 0x861}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000001c0), 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:30:56 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) 02:30:56 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() dup(r0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) tkill(r1, 0x26) 02:30:56 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x901, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) 02:30:56 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x800000000000009) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = accept4$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x800) ioctl(r1, 0xffffffff, &(0x7f00000009c0)="c7678335e6dbc1e653be63273941cb1df74ee36cfbb0f85a46c37d20ea22574768c546a99e547d0f8857be64bc5a3691558a9bbcdd56b2") sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@newtfilter={0xd8, 0x2c, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, r2, {0x0, 0xd}, {0xfff3, 0xffff}, {0x0, 0x9}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0xa8, 0x2, [@TCA_CGROUP_ACT={0x90, 0x1, @m_skbedit={0x8c, 0x1e, {{0xc, 0x1, 'skbedit\x00'}, {0x3c, 0x2, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xf}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0xf8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7f, 0x0, 0xd, 0x10000, 0x7f4}}]}, {0x3c, 0x6, "2837e7f71fbff36a4744ae437f9cb920319835d760571f11cb54670454acf0d4dae0fc489c2168e99c72a274c8408aae745b4c8dcb5893"}}}}, @TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x480c4) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f00000001c0), 0xfce8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 02:30:56 executing program 1: openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) clone(0x1000000000011, &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) semget(0x2, 0x0, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) waitid(0x0, r1, 0x0, 0x4, 0x0) 02:30:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 02:30:56 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) 02:30:56 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) 02:30:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 02:31:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/\x00\x00z0\x00\x906\xa3\x95A\x1c\xf5\xee\x8aj\xdf\n\xcb\xf0\xce\xd9,Fj\xbd\xad\x89!\xf9\x00\x9f\x80\xd5\x01)c)\xaa\xba\x92\xe1\xd6\xa6\x0fTA\x16jwl\x1a\x92% \x1dY\xed\x87b_\xc4\x97r\xf68u\xf4~g\x1b\xf3g\x0e\x167F\xce\x93\xef\xe1\x91\x81\xe3\xc7*\xdb\x84\x82$\xaa\x8f\xd6 \x98\x81\f\xf4R\x99\xb2\x87#E\xccGc\xf2\x0fs\xed\xff\xc7\xed>Zy\x92\t\xcd\xc8\fN4\x1fn\x99\xd3P!\xb2gR\xdb\xd1\x95`\xadf\xdb($B\x95\xd1\xef\x15\x9ek\b\xc7\x17u<\xcb\xec\xde\x92 \xf1\x01X!y\x8e\f\x1eo\x84o\x12\x1b\x17\xb3\xd7%Mw\xb9[\v\x19B\n\x87l\x9b\xacn\x86tt\xeb\xb7\xf9r\x82\x16\xac\x12\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 02:31:01 executing program 0: r0 = open(&(0x7f0000000000)='./file1\x00', 0x400043, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) close(r0) prctl$PR_GET_TIMERSLACK(0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f00)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000f00)={{{@in=@multicast2, @in6=@initdev, 0x0, 0xf52, 0x4e23, 0x9, 0x0, 0xa0, 0x80, 0x2}, {0x1, 0x10000, 0x1000, 0x0, 0x0, 0x6, 0x0, 0x9}, {0x4, 0x0, 0xc2b}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d2}, 0x2, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0x9}}, 0xe8) 02:31:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 02:31:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 02:31:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)) 02:31:01 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() dup(r0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) tkill(r1, 0x26) 02:31:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 02:31:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000480), &(0x7f0000000740)=0xc) lseek(r0, 0x0, 0x155d80fa1ababfe6) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r5], 0x2}, 0x1, 0x0, 0x0, 0x40000}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000980)="824ade8c8bd4a6dd355635efdc13e799768c218fc59105ba0ce0d222dcd9c7f418e474577a83cd5c64e9a0fbbfafb027d2c371ad8762f37b2f9985c67fc548cd3eb10a9d674dc6e523eda3aa6f4c553ce124a79b5e32c33d40", 0x59}], 0x1, 0x1) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ptrace$setopts(0x4206, 0x0, 0x0, 0x100000) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x6, 0xc55f, 0x1, 0x0, [0x0]}}, 0x29) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r0, 0x0, 0x2000005) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 02:31:01 executing program 1: io_setup(0x0, 0x0) io_destroy(0x0) dup(0xffffffffffffff9c) chdir(0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 02:31:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 02:31:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x20, 0x20, 0x101}, 0x20}}, 0x0) [ 818.692507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 02:31:01 executing program 1: 02:31:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 02:31:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 02:31:01 executing program 1: 02:31:02 executing program 3: [ 818.921438] print_req_error: I/O error, dev loop5, sector 768 [ 818.996197] print_req_error: I/O error, dev loop5, sector 0 [ 819.002134] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 819.009895] print_req_error: I/O error, dev loop5, sector 4 [ 819.015795] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 819.023631] print_req_error: I/O error, dev loop5, sector 8 [ 819.029393] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 819.037257] print_req_error: I/O error, dev loop5, sector 12 [ 819.043200] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 819.050958] print_req_error: I/O error, dev loop5, sector 16 [ 819.057063] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 819.064871] print_req_error: I/O error, dev loop5, sector 20 [ 819.070726] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 819.078656] print_req_error: I/O error, dev loop5, sector 24 [ 819.084578] Buffer I/O error on dev loop5, logical block 6, lost async page write 02:31:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) [ 819.092407] print_req_error: I/O error, dev loop5, sector 28 [ 819.098253] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 819.106195] print_req_error: I/O error, dev loop5, sector 32 [ 819.112119] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 819.119863] Buffer I/O error on dev loop5, logical block 9, lost async page write 02:31:02 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() dup(r0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) tkill(r1, 0x26) 02:31:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) [ 819.292582] protocol 88fb is buggy, dev hsr_slave_0 [ 819.298452] protocol 88fb is buggy, dev hsr_slave_1 02:31:02 executing program 3: 02:31:02 executing program 1: 02:31:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) 02:31:02 executing program 0: 02:31:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) 02:31:02 executing program 3: 02:31:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x20, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x8}]}, 0x20}}, 0x0) 02:31:02 executing program 0: 02:31:02 executing program 1: 02:31:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) 02:31:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0x901}, 0x14}}, 0x0) 02:31:03 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) gettid() r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) tkill(0x0, 0x26) 02:31:03 executing program 0: 02:31:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{}], 0x1}, 0x0) 02:31:03 executing program 3: 02:31:03 executing program 1: [ 820.233728] tc_dump_action: action bad kind 02:31:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{}], 0x1}, 0x0) 02:31:03 executing program 0: 02:31:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0x901}, 0x14}}, 0x0) 02:31:03 executing program 1: 02:31:03 executing program 3: [ 820.470645] tc_dump_action: action bad kind 02:31:03 executing program 0: 02:31:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{}], 0x1}, 0x0) 02:31:04 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x0) 02:31:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0x901}, 0x14}}, 0x0) 02:31:04 executing program 3: 02:31:04 executing program 1: 02:31:04 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f00000000c0)='./file0\x00', 0x200000000008007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) 02:31:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa283000920", 0x12}], 0x1}, 0x0) [ 821.187652] tc_dump_action: action bad kind 02:31:04 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) flock(r0, 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2000000000000003) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5080085f6017afe5348"], 0xa}, 0x0) 02:31:04 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b587022f3c1a70dfb4a7e42f4d969d348234aa28280e62eba139f5c6be7347a4f3d9a4f0bcd5a2e6e6af71f0e645ac7e492b0d04db34e30f6bc29154221969c8f8b9dd6866fae10657449f198ab0013fe5d8b06a74589d95a4e476d6ed123673a513fb8f263fb574933040235da6e520fb8c9fe2849245bab807b859a67ebc7e9aad7b"], 0x1, 0x0, 0x0) 02:31:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa283000920", 0x12}], 0x1}, 0x0) 02:31:04 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e78"], 0x1, 0x0, 0x0) 02:31:04 executing program 5: 02:31:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa283000920", 0x12}], 0x1}, 0x0) 02:31:05 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x0) 02:31:05 executing program 3: 02:31:05 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000001800)={&(0x7f00000000c0)=@in={0x2, 0x0, @multicast2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) 02:31:05 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x40086607, &(0x7f0000000000)={0x7ffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) unlink(0x0) 02:31:05 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0072712d61202b72646d61202d637075202f6300ff7f2b696f202f637075202b637075202b6d656d6f7279202d63707520"], 0x31) socketpair(0x19, 0x5, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000006d00000000000000bf610000000000008510000002000000bf0100000000000095000000000000004501000000000000b7000000000000009500000000000000"], 0x0}, 0x48) socketpair(0x0, 0x807, 0x8f, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f00000002c0)=""/9, 0x9}], 0x3, &(0x7f0000000580)=""/211, 0xd3}, 0x5) recvmsg(r3, &(0x7f0000000a80)={&(0x7f00000006c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2, &(0x7f0000000980)=""/228, 0xe4, 0x81}, 0x40000000) write$cgroup_int(r2, &(0x7f00000000c0)=0x25, 0x12) close(r1) close(r2) 02:31:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85", 0x1b}], 0x1}, 0x0) 02:31:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85", 0x1b}], 0x1}, 0x0) 02:31:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="6f83000000bfffffffff"], 0xa}}, 0x0) 02:31:05 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0203e500100000000000004c9e0000080009aa08020000000000000000000001050006f4200000002a0700000002545f632baff44a28f6617d288f000300010504e50000070000001f06000000000000000201000000022001000000000000a00e4923000002e8ff617c050005eaffffff000a00010000000000ff1700000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a00000700000000e500000000000005001a00000080000000000000001e7b5f9600000000000000000000000000000000000000780010"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000014e, 0x0) 02:31:05 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f49c2a77033bdb9072bff9f507386dcfa4a8e9fabdd3f"]]], 0x8}, 0x0) 02:31:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85", 0x1b}], 0x1}, 0x0) 02:31:05 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) 02:31:05 executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0945c32e660f73fd18c4c27d794e00664207d9e33e0f1110c442019dccd3ee6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = gettid() r2 = dup(r0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) tkill(r1, 0x0) 02:31:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') sendfile(r0, r0, 0x0, 0x7ffffffb) 02:31:05 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 02:31:05 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 02:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000440)='./file0\x00') 02:31:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba2", 0x20}], 0x1}, 0x0) 02:31:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba2", 0x20}], 0x1}, 0x0) 02:31:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2040) 02:31:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x42) 02:31:06 executing program 0: clone(0x8000fffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() exit_group(0x0) get_robust_list(r0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) 02:31:06 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'lo:\x05\x00', {0x2, 0x0, @dev}}) 02:31:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x7ffffffb) [ 823.355999] syz-executor0 (24987): /proc/24986/oom_adj is deprecated, please use /proc/24986/oom_score_adj instead. 02:31:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') sendfile(r0, r0, 0x0, 0x7ffffffb) 02:31:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba2", 0x20}], 0x1}, 0x0) 02:31:06 executing program 5: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x80000000}) 02:31:06 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x101, 0xfffffffffffffff9, 0x30}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) dup3(r1, r1, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) r3 = timerfd_create(0x0, 0x80800) geteuid() read(r3, &(0x7f0000a16000)=""/71, 0x2c9) sched_setaffinity(0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x7c, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 02:31:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') sendfile(r0, r0, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) 02:31:06 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000000340), 0x334, 0x0) 02:31:07 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') 02:31:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 02:31:07 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400", 0x22}], 0x1}, 0x0) 02:31:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') sendfile(r0, r0, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) 02:31:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') pread64(r0, 0x0, 0xfffffe5e, 0x0) 02:31:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x0) 02:31:07 executing program 4: accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) pwritev(r1, &(0x7f0000000240), 0x0, 0x0) r2 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r2, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000540)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) 02:31:07 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400", 0x22}], 0x1}, 0x0) 02:31:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)='J', 0x1}], 0x1) 02:31:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') pread64(r0, 0x0, 0xfffffe5e, 0x0) 02:31:07 executing program 5: clone(0x38646276a7dc37ef, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 02:31:07 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) [ 824.472137] input: syz0 as /devices/virtual/input/input34 02:31:07 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400", 0x22}], 0x1}, 0x0) 02:31:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) 02:31:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000340), 0x334, 0x100000000000000) 02:31:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 02:31:07 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff", 0x23}], 0x1}, 0x0) 02:31:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') lseek(r0, 0x0, 0x0) 02:31:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') pread64(r0, 0x0, 0xfffffe5e, 0x0) [ 824.869366] input: syz0 as /devices/virtual/input/input36 02:31:08 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x101, 0xfffffffffffffff9, 0x30}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) dup3(r1, r1, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) r3 = timerfd_create(0x0, 0x80800) geteuid() read(r3, &(0x7f0000a16000)=""/71, 0x2c9) sched_setaffinity(0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x7c, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 02:31:08 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff", 0x23}], 0x1}, 0x0) 02:31:08 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffaf) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x810005, 0x0) 02:31:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') pread64(r0, 0x0, 0xfffffcc0, 0x1fd) 02:31:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') pread64(r0, 0x0, 0xfffffe5e, 0x0) 02:31:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) truncate(0x0, 0x0) socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x15}}], 0x1, 0x40, 0x0) 02:31:08 executing program 2: r0 = socket$inet(0x10, 0x3, 0x200000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff", 0x23}], 0x1}, 0x0) 02:31:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc) io_setup(0x8, &(0x7f0000000040)=0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000140), 0x7}]) 02:31:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 02:31:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r0, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) 02:31:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) r3 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000001c0)={0xfffffffffffffffc}, 0x7075d62a) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) 02:31:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x1000000000402004, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2b, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) [ 825.446702] input: syz0 as /devices/virtual/input/input38 [ 825.452000] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 825.459884] netlink: 'syz-executor0': attribute type 29 has an invalid length. 02:31:08 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) clone(0x10609f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) [ 825.498155] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 825.523482] input: syz0 as /devices/virtual/input/input39 [ 825.573825] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 825.581878] netlink: 'syz-executor0': attribute type 29 has an invalid length. 02:31:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') sendfile(r0, r0, &(0x7f0000000000)=0xffffffd, 0x7ffffffb) 02:31:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000004d80)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') preadv(r1, &(0x7f00000017c0), 0x1fe, 0x0) 02:31:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x18) 02:31:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) 02:31:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r1, &(0x7f00000022c0)=[{&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x2, 0x0) 02:31:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 02:31:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00\x00\x00\x1b\x00\x05\x00\x00\x00\x00\x00\x00\x03\x00', 0x20000014ffe}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000008001b00000000009fbac1cb64b06da1d4bf1a69f244f2eaa674851338ddda2b1be247fd4fd68f90c740bd203a18b150b1d1109e58c2d16ff7"], 0x1}}, 0x0) write$tun(r0, 0x0, 0xa1) 02:31:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:31:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 02:31:09 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r2+10000000}, 0x0, 0x0) [ 826.070985] input: syz0 as /devices/virtual/input/input40 02:31:09 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, 0x0, 0x2008000fffffffe) 02:31:09 executing program 0: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000180), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x4206, r0) ptrace(0x4207, r0) 02:31:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:09 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40100000005, 0x0, &(0x7f0000000080)) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) 02:31:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) [ 826.467268] input: syz0 as /devices/virtual/input/input42 02:31:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') preadv(r1, &(0x7f00000022c0)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x0) [ 826.534176] input: syz0 as /devices/virtual/input/input43 02:31:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) 02:31:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x0) 02:31:09 executing program 4: clone(0x1a020000, 0x0, 0x0, 0x0, 0x0) 02:31:09 executing program 1: 02:31:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:10 executing program 4: [ 827.083944] input: syz0 as /devices/virtual/input/input44 02:31:10 executing program 3: 02:31:10 executing program 0: 02:31:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001900)=[{&(0x7f0000001540)=""/250, 0xfa}], 0x1, 0x0) 02:31:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1, 0x0) 02:31:10 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:31:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) [ 827.477405] input: syz0 as /devices/virtual/input/input45 02:31:10 executing program 0: 02:31:10 executing program 2: 02:31:10 executing program 3: 02:31:10 executing program 4: 02:31:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:10 executing program 1: 02:31:10 executing program 0: 02:31:10 executing program 2: 02:31:10 executing program 4: 02:31:10 executing program 1: 02:31:11 executing program 3: [ 827.917339] input: syz0 as /devices/virtual/input/input46 02:31:11 executing program 0: 02:31:11 executing program 4: 02:31:11 executing program 2: 02:31:11 executing program 0: 02:31:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000480), 0x1) 02:31:11 executing program 3: 02:31:11 executing program 1: [ 828.306027] input: syz0 as /devices/virtual/input/input47 02:31:11 executing program 2: 02:31:11 executing program 4: 02:31:11 executing program 3: 02:31:11 executing program 0: 02:31:11 executing program 1: 02:31:11 executing program 2: 02:31:11 executing program 4: 02:31:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000480), 0x1) 02:31:11 executing program 1: 02:31:11 executing program 4: [ 828.650227] input: syz0 as /devices/virtual/input/input48 02:31:11 executing program 3: 02:31:11 executing program 0: 02:31:11 executing program 2: 02:31:11 executing program 4: 02:31:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000480), 0x1) 02:31:12 executing program 0: 02:31:12 executing program 3: 02:31:12 executing program 1: 02:31:12 executing program 2: 02:31:12 executing program 3: 02:31:12 executing program 4: 02:31:12 executing program 0: [ 829.135738] input: syz0 as /devices/virtual/input/input49 02:31:12 executing program 1: 02:31:12 executing program 3: 02:31:12 executing program 2: 02:31:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:12 executing program 1: 02:31:12 executing program 4: 02:31:12 executing program 0: 02:31:12 executing program 3: 02:31:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:12 executing program 2: 02:31:12 executing program 1: 02:31:12 executing program 4: 02:31:12 executing program 0: 02:31:12 executing program 3: 02:31:12 executing program 2: 02:31:12 executing program 3: 02:31:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:13 executing program 1: 02:31:13 executing program 0: 02:31:13 executing program 4: 02:31:13 executing program 2: 02:31:13 executing program 3: 02:31:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:13 executing program 0: 02:31:13 executing program 1: 02:31:13 executing program 2: 02:31:13 executing program 4: 02:31:13 executing program 0: 02:31:13 executing program 1: 02:31:13 executing program 3: 02:31:13 executing program 2: 02:31:13 executing program 4: 02:31:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:13 executing program 2: 02:31:13 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x4f06c1cd) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1/file1\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)='./file1/file0\x00') 02:31:13 executing program 0: 02:31:13 executing program 1: 02:31:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:13 executing program 2: 02:31:13 executing program 4: 02:31:13 executing program 0: 02:31:13 executing program 3: 02:31:13 executing program 1: 02:31:14 executing program 0: 02:31:14 executing program 2: 02:31:14 executing program 4: 02:31:14 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x1) 02:31:14 executing program 1: 02:31:14 executing program 0: 02:31:14 executing program 3: 02:31:14 executing program 4: 02:31:14 executing program 2: 02:31:14 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x1) 02:31:14 executing program 1: 02:31:14 executing program 0: 02:31:14 executing program 3: 02:31:14 executing program 4: 02:31:14 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x1) 02:31:14 executing program 2: 02:31:14 executing program 1: 02:31:14 executing program 0: 02:31:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:14 executing program 3: 02:31:14 executing program 4: 02:31:14 executing program 2: 02:31:14 executing program 1: 02:31:14 executing program 0: 02:31:14 executing program 2: 02:31:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:15 executing program 0: 02:31:15 executing program 3: 02:31:15 executing program 4: 02:31:15 executing program 2: 02:31:15 executing program 1: 02:31:15 executing program 2: 02:31:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:15 executing program 3: 02:31:15 executing program 0: 02:31:15 executing program 4: 02:31:15 executing program 1: 02:31:15 executing program 2: 02:31:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:15 executing program 0: 02:31:15 executing program 3: 02:31:15 executing program 4: 02:31:15 executing program 2: 02:31:15 executing program 1: 02:31:15 executing program 3: 02:31:15 executing program 0: 02:31:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:15 executing program 4: 02:31:16 executing program 2: 02:31:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:16 executing program 3: 02:31:16 executing program 0: 02:31:16 executing program 1: 02:31:16 executing program 4: 02:31:16 executing program 3: 02:31:16 executing program 2: 02:31:16 executing program 0: 02:31:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:16 executing program 1: 02:31:16 executing program 2: 02:31:16 executing program 4: 02:31:16 executing program 3: 02:31:16 executing program 0: 02:31:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:16 executing program 2: 02:31:16 executing program 1: 02:31:16 executing program 4: 02:31:16 executing program 0: 02:31:16 executing program 3: 02:31:16 executing program 2: 02:31:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:17 executing program 0: 02:31:17 executing program 3: 02:31:17 executing program 4: 02:31:17 executing program 1: 02:31:17 executing program 2: 02:31:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:17 executing program 3: 02:31:17 executing program 0: 02:31:17 executing program 1: 02:31:17 executing program 4: 02:31:17 executing program 2: 02:31:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:17 executing program 3: 02:31:17 executing program 1: 02:31:17 executing program 4: 02:31:17 executing program 0: 02:31:17 executing program 2: 02:31:17 executing program 3: 02:31:17 executing program 0: 02:31:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:17 executing program 1: 02:31:17 executing program 4: 02:31:17 executing program 2: 02:31:17 executing program 3: 02:31:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:17 executing program 0: 02:31:17 executing program 1: 02:31:18 executing program 3: 02:31:18 executing program 2: 02:31:18 executing program 4: 02:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:18 executing program 1: 02:31:18 executing program 0: 02:31:18 executing program 3: 02:31:18 executing program 2: 02:31:18 executing program 4: 02:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:18 executing program 1: 02:31:18 executing program 0: 02:31:18 executing program 3: 02:31:18 executing program 2: 02:31:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='scalable\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fadvise64(r1, 0x0, 0xffffffffffff8000, 0x0) 02:31:18 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 835.696309] input: syz0 as /devices/virtual/input/input68 02:31:18 executing program 3: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 02:31:18 executing program 2: 02:31:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:19 executing program 2: 02:31:19 executing program 0: getgroups(0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000209000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 836.018817] input: syz0 as /devices/virtual/input/input69 02:31:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) [ 836.200674] mmap: syz-executor0 (25526) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 02:31:19 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000080), 0x1c) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0xfffffffffffffffe, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) [ 836.355613] input: syz0 as /devices/virtual/input/input70 02:31:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 02:31:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:19 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r0, 0x0, 0x2000006) 02:31:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x240000) ioctl(r0, 0xfff7ffffffffffc8, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000209000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 836.761339] input: syz0 as /devices/virtual/input/input71 02:31:19 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') unlink(&(0x7f0000000100)='./file1/file0\x00') 02:31:20 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000000340)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) 02:31:20 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000380)=[{r2}], 0x1, 0x7) 02:31:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x245) 02:31:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:20 executing program 0: syz_execute_func(&(0x7f00000000c0)="3666440f50f564ff0941c3c4e2c9975842c0c27d794e0066420fe2e33e0f1110c442019dccc4c105d0da3e470f01d4") syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") pivot_root(0x0, 0x0) [ 837.226542] input: syz0 as /devices/virtual/input/input72 02:31:20 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$md(0xffffffffffffff9c, 0x0, 0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001740)={0x2823542c, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) 02:31:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)) 02:31:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, &(0x7f0000000480), 0x1) 02:31:20 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0xffff, 0x0, 0x4, 0x0, {r1, r2/1000+10000}, {0x5, 0x0, 0x0, 0x101, 0x3, 0x7, "baf64c4e"}, 0x3, 0x4, @userptr, 0x4}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001740)={0x2823542c, 0x80000001}) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) [ 837.581109] input: syz0 as /devices/virtual/input/input73 02:31:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000740)=@v2={0x5, 0x1, 0x8, 0x81}, 0xa, 0x2) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) 02:31:20 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000600)={{0x3, 0x1, 0x40, 0x2, 0x2}, 0x6, 0xffffffffffffff10, 'id0\x00', 'timer0\x00', 0x0, 0x8000, 0x9, 0x4, 0x6}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r2, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x144000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="220325bd7000fbdbdf250e0000003800020008000100010000000800020081000000080001000700000008000100a5d9000008000100ffffffff0800010000100000040004002c000900080002000600000008000100ab6900000800010000000000080001001f000000080002000400000068000500080001"], 0x1}, 0x1, 0x0, 0x0, 0x33e2f83e438ab7c5}, 0x4004) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) exit(0xd20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 02:31:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xfff7ffffffffffc8, &(0x7f0000000080)) 02:31:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='scalable\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x1) 02:31:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000740)=@v2={0x5, 0x1, 0x8, 0x81, 0xef4, "0c869ed86c93aa1cd5dbe0c560305e17e9e33e9bedf1b925de03224785a1d94f76e9052a70dae0dd8c76f674067a833bb6b14834c8f3d9c8ebe10c7ba9ee87397098c5d4581dc6fa9ace564df65dc3bece7f790feb6c45e76d012158fab468833781b605124fe5ff85df4b5b14fc1063a9736e286bae1c405b454123dea917147f8873867a36010e9db90db7c02ecf9a99245de14e1ed9ea85152d274c46696b60a23a32a9573cfcc181b371e17ce3c2d70d09f1bcc2556f4641b8e5311be23ff0c957464a63f54f457e2515537db460ad3af61f3e71364dcaa0cd043327031ac9654b7bcdf8e752c3dfcab26b655675ea5e00224829a005236f21f76a051358010b49605b809cea895eb2375a97a20c76f5fb8503a1b2db08374cd20616ad82306ed0f73dfe65d8172afefd88498c889e411dc4df2a506381fd10935d7602382b0459efa392e1b71b4575e6c89bb4bef9c3a37e40bd09a71fafbe4e97e82a0cb1b4c2bbd0b217454cfd69e591d7230ae91e81eddeb04b1066a62981a9c2f15f85ffeef5df8fffac708cd2c695afbf4bba0b0f09b369fa111d25d493bfb175f8da438515eafacdeba619a8623bae65a669082265bca7828a37653c165dbfd979f9fd1ffb65a392299134acc2ec0733aeb51ff2dfd9f5b220144e39383634b66af0f098e8162319aea43047f77dbca065fc7f1bd4ba6f8901008adc386da90177e1ed0f2662032d1a8dcb98e040f2cefab3907af4b386a1c9276a9e0b10233ff23636434b00989e7d371aa68a8d09e1af48c59d2dd41026cf98ab35cfa327e835c995c91e1ccc8c295561c00d514ead80fabd5f0b28657b0cd9826f42105030c044979c0f11ebdade82ff741e7ef5ff14f0ef50afad89d7f6486e45ef876b279af3ee49f2c8be8ed7875c1a2ffb2dfda711ce34b6e8b857eb8d7c087cb51de930e37fdf68277a6394df7372cbf1827043775352708130e13bedc772a217a3329c281f0e35b5a2a6086a82c150126e2282ec68258ba982e3ed6fd3588a6b031bb23729a66c16da0450da2106fa6705ce4f8e4dd1e607f00e9fc3d157943de727010837b1c42cf66b4b83b3fcbdb4516cd885eadecce9b872745b45b0c9fb2332bfc40ad7c557a9d6e7474d7ff288c584ec2c2d5581bc36e5681e051fd9b29123ab1493416b26bb62e9af625ea034fa9cd394cab81147bcd1af9877582b1365a7ae8b441ebb8cc550046a8cbac9d9b25ca6b5401c9fb1c4c7e216ced27a352c772f82c1e68eae1261ef20466ccd3814f3c6db10b3291c18210fd497f078a6fe6629ab6abdd749c97073310363d11869dbe3f387fe2026302183449dc10ab31b8f21f8390f222299752e3856ad047a3bae1cbba90cece600b20dae94036b1303cda882da5d051aa82e5479419aee3a2b4ed6be473259d610ec2175afb5c5abdcfda9921363bce1d5dbb4b96c349343a28e91092a9c6e6cae80a2b1bfc9597c8dca65d6a5e544707be104a908079cd12fd1e7deb6eab0bb0acaeb368186b6263f2f74ddc5166ba5d6e48a9866fc9d9552f6202a2f67fbdab0bd63748b9bcc4a36717ec0a4f01a1474d75e7a3158991ee15f5a3f0539d2422e8e786f0997caed19a592dcf98b1d385042fefdbc59608317dbc0f51feebb9ed4e2fa9b551610f42049bd5ca42fcff5a842777095a542c7537e61e70b76e63dc4d549f5a0457421482a207a9096100b000fa483b8bc40ffb22f7f1149e8bcacfa8fbd9d7d45346fa2d5a20b059cd4aa74d73a69c9c4ff9811aade76b69145bd7294bcd182bd4f0b235b32559eaf5ad439a5cb95e87aa7471b2075fde583e5ecc210c87c2c0f4c36763fb6b0185f511012b6ea25720fdcc79f10b7cdfb308fc6536851d7019273a0ede109118423018bbf5ba40c3c7bedbbf58fbdc2afab1d5cb376a85cf0fa3984bd53ff57dcf493f146fc401771494f1db60ef7699e70dad287e833a42afa54bc50a1236516cb907b1815d6c5effb20907105d1c0317a48531eb861031c960cf1a7c2f053378a147601be925df9f64b0a91f3de8714b6768cc758daefc9c1b9a76e0209a505c702ab8dc940d5b0691e267defe060972f48d5d2e326735533f16c77e2b240f8d796cf0eeaaf03094b7d486269b0b3be2eb9edcc84acd259426afeff3a5649338dda0e2de5c5bf3453d5b8e7074eb954bed68bf5bde96957f22ec2d73d18af0c07a67e61f1491f29308988e592fb60bd044552c31f657e28dd22df954793922a004b37f4a8e29271efcd9eefc3a05044def91177e0d053c20127cab99f22d1256b8cf237682f1491833edc124e5d29f44b614272e9adffe1cbc6dde81ce49c4fe2e055b48c913bacc7cc838e387fda50c6869b45034b584ba5225fbfe5e397d69d201e38a851c7ffb92c5ee8c8ed20bb3265c43465331df8c540817c0fb382782fcbeb6325d20c4762df9a07c9410fded709303a0538496d7b5637cb10cbd9ecb4689817d1e0e3ccb6b7094737d7d22eb3766bb1098505191a3f9e9220c555e28e24622f44f442779b09be7d602161bf1acb9fe477db6504a9741ee30781df5065cad79a9940a22597f2e0f2564f6297c8b4a10e1e8ec7645e9f2c5d879d00fc92aeb929fd892e432876338a74bd492370bebdccb1796450c0fbf0fa22193e009eb233b74375b9ce694843eb2f9c07550a584f0300e45b23ddbab41cc9ff7589465c74f95c0e1f0fbd9366ee9fe9e0ccdea934be056393ce1f68b965974904fd515245f6ea1087d4396117ef7da89242f4f9d394e00541c2393eeab2e71fca144f24abc0757ca46748e2f790737952f3520252d396c9fd079b1e2f3b2a2f58da6f52224610cb27448e0bc83d9dd0fd543408865179d4fd79d8a85ecb378b0e5c432a772944677efc6424d19171a8da0b581aebba0a33be03304377c087052728c2c55868244d8bce23cff20dc367190f993a9dbac00d96d517036ac2a49747392e98c28bbe229712e2a702950e3a5c2eb57f7b3dd6cfe371ad26756ee0bdf1d7fe7feca39170aeb82579e2f748db6dfdd629a8f0a1accdacfc2c1f8104dea80ffc88b9404c1f0e8bad659f461729bc7acf981f945edb36fd329d28ad813214e118169edca098d5839bbe577d05e78ee3f763c926c73ed388fb031bb6114fcdfecfe6313bc4f597c50016513810111415759196946d755e6f2d26ca13750fc835d3a8b6de65d276c5d31fad68bb057f1e610b9826916916cc66eecbae2034a79b7453402fa240d4b6a5379126b9574641c2075edd5d625f433de6a0e145f32109d6437d108d167b21e2cb4a410296e4fe32f2005ea16eba06255b9b03d99c53cd7731526e9aa3da4c8c204ba19a77c5faaf9a4acc10c43cb252803a235a631cea5317afbf3218477f7a6ca4d590427d0ba29d63637ef675572c445ce979282cd2c8aec4423043d2649edd1e76d0667671c39e97d8ce14846c2bd9c327e417264e2888c11d1d8d1f5f7466279d6bca5585a0d5e24f5605e8967f8cb8799644e82c962a1b0c9c810c3cd13eef4a5318a4d7561fea32202019747fb5321a38869a5a71e98bf3a28d841b0393146afd55dca6de0866bc42f9a0962d8d8444b1c002d171a6018237193d502e7edd4956b3779b9547e82135e4030ef58fea7846836c96666dc8d35901c9a8263476145a98e6730c291714da8a1d1640120775705a7154515438112ac9b34812ed9939d4d6f088d6fe82cb43971db2f4ebec832da9d4092427c48e338fc0a1d62311abcb346f75043ed2baf2f11c78c2f22d2bdbb76a3fd1fb0688b00ac598271f5120519237c50d6568854fc618ea6808a0c30d17a0a509862956fb662666142e6fd2614046dccea4c698ed00ffcc86e9d5085a5da253048c7873bf05bd0e0f618401550442be563e1abcb9692d0968f1bff328fb28a0600f6036512eabc7da1ffb4944f40069f2917deacfd98bb7b92b41969c1237f4bc7de50654177c3c54850a8a2c40a3fa343bcdc9c00aa239544935ee9823b14782c683ac16cca9032446c8fa8a5b98e228fd023648b771f7cff048eb2322cdba1cc2087de75150f136ed7ac27aef79d35fe97bca7a41961a36dd9bba6e7b7265db162d250b174ec2ea8612a5db74eb9611830521f093d2fe877705579fec3e45b9824f5fd16e12ff430c332fc2c0b59d31d259a7f66b10eaf4c3222abca560aef65fd403282913a50bb4aa3a3ad3114f3f54523a1a371879e64e51c9367e2a99f47e63f9b1357f79392abf654ad86944f168f0f76a345cea526c4bfe2981d60a6d1a814bff8bcdcbe6876890599f6dec3ef8e82f4bd69ad7a19e46e0606a4329f2b4af9b78ee39ff1ee0c9ad60f297d7ca9ecc3b0c3caefbc80dffa0ce146c39244f47694acd467477439388073dfb07676cf8a3cc304128b85661008025b50accb3f0a5c3cdd3748be35b454100c9acc2827e4b7687e77d7eba312c827dc0ea79606cb2e4b891c4981326f16de61607adc33763090f264452d4ff5828480a5104d9575e22ba3bf933fd8b5fef86604a6fd09729eaef8452114a81a389341407f16ae38470a9b323d88dfdf601ad2d37ad792a189a46dc0891f737d7e30edc367703e286cadbd9ef9df8fa1cfea5f32fd7c63856eacdad426c66559b1db5173a40f7f0a00130cd8409a38c9d916146e470d59fd112187536d4864b75a7f9447772684ee395723caf061070a820a74612cdb94d9d9c77bbbfe9f3e9230a03459b6443128c40c94abd5d4d0f54a410d3c3773f0c01d277d7af663736bc8430de5b17c7a34ad178f71c48b4a0a5f5808ea89c4a9dc07f4e858ca0cc79f75778f48529a789d262f3c43c0388455d6c2677f525462a2cbc86f1e50dce02be151f2e98ce306f4e2fb2124a8b1bcf89b3c12b324e060fa01694b10aea7be9af82bd417c0d774e7e7b3ae0bb408c0dfc93030773f06c355dc506c4ea0073476c727313094ddb9e3630e909c78ea39d134ccea5edba7c25d3199dd96066a25099093debacb2262509c4fdccf14e9f95185bd352490c9a9fe70c121bc1482ccd4942f10f3d4345d8c8fa25be80ea7fc18649b94984cbc5a3681baeeb23fd58daa6264b403a9030b3fed21cf0f4eaa85933fc73483704543a7dc09db49d2aa84b39d67b1b40def98a0b8ca043bd37cec8905bf11c1d53fff6ee206c5099ba8e94010f39aa815d4be615aeb84da36d6979dae9ef50bf24f6e3950f11ee8d4a02281472d95f9c456db074fa03fb6928a0560afc10269504c7d43c7f70dbcba1ec1c50ae69cbf7e63facd36eea093cee45c02ab04c6903fe8cc2c40662b85f7571b8907954ee81d45c1e1a1656cb5cfe2765b552887bc0cc853ea845562e5b9c8dfbc65b5620a9c711db488d55960c5ef2023f2069885a7d49"}, 0xefe, 0x2) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x0) 02:31:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) [ 838.215271] input: syz0 as /devices/virtual/input/input74 02:31:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x1) 02:31:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1a02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000140)={0x6, {{0x2, 0x0, @dev}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 02:31:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x0) 02:31:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000140), 0x35b) [ 838.476300] input: syz0 as /devices/virtual/input/input75 02:31:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x1) 02:31:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 02:31:21 executing program 4: 02:31:21 executing program 0: [ 838.867560] input: syz0 as /devices/virtual/input/input76 02:31:22 executing program 2: 02:31:22 executing program 3: 02:31:22 executing program 0: 02:31:22 executing program 1: 02:31:22 executing program 4: 02:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, 0x0, 0x0) [ 839.226873] input: syz0 as /devices/virtual/input/input77 02:31:22 executing program 3: 02:31:22 executing program 0: 02:31:22 executing program 1: 02:31:22 executing program 4: 02:31:22 executing program 2: 02:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, 0x0, 0x0) 02:31:22 executing program 0: 02:31:22 executing program 4: 02:31:22 executing program 3: 02:31:22 executing program 1: [ 839.609373] input: syz0 as /devices/virtual/input/input78 02:31:22 executing program 0: 02:31:22 executing program 2: 02:31:22 executing program 1: 02:31:22 executing program 4: 02:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) writev(r0, 0x0, 0x0) 02:31:22 executing program 3: 02:31:23 executing program 0: [ 839.985417] input: syz0 as /devices/virtual/input/input79 02:31:23 executing program 1: 02:31:23 executing program 2: 02:31:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket(0x200000000000011, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @ipv4, 0xfff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000580)={0x11, 0x400000000200003, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6029717c26000102000000000000000000001d000000000000000000000000000400000008000a0000000000"], 0x1}}, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80, [], 0x1b}, 0x800, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x2, 0x3, 0x4, 0x7, 0xa0}, &(0x7f0000000000)=0x98) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r6 = socket$inet6(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x5, 0x1) socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 02:31:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x11}, 0x98) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x40, 0x0, 0x0) 02:31:23 executing program 5: 02:31:23 executing program 0: 02:31:23 executing program 2: 02:31:23 executing program 1: [ 840.356937] IPVS: ftp: loaded support on port[0] = 21 02:31:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f000063a000)=0x7ffb, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) 02:31:23 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@random="e187a48d30b3", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 02:31:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x8, 0xfeaa) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x3ff, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@dstopts, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 02:31:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000080)={'bond_slave_1\x00', @ifru_map}) 02:31:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x180000000000000a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmmsg(r0, &(0x7f00000002c0), 0x4000139, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000000c00)=@nl=@proc, 0x80, 0x0}}], 0x1, 0x0) [ 840.572625] protocol 88fb is buggy, dev hsr_slave_0 [ 840.578370] protocol 88fb is buggy, dev hsr_slave_1 [ 840.584420] protocol 88fb is buggy, dev hsr_slave_0 [ 840.590183] protocol 88fb is buggy, dev hsr_slave_1 [ 840.652808] protocol 88fb is buggy, dev hsr_slave_0 [ 840.658596] protocol 88fb is buggy, dev hsr_slave_1 02:31:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b93c564b63ff2d3822e13030e9670000", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006dc0)=[{0x1000000f0ffffff, 0xffffff7f00000000, &(0x7f0000000080)=[{&(0x7f0000000140), 0x8000a0}], 0x1}], 0x1, 0x0) [ 840.717467] IPVS: ftp: loaded support on port[0] = 21 [ 840.749506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 840.892673] protocol 88fb is buggy, dev hsr_slave_0 [ 840.898451] protocol 88fb is buggy, dev hsr_slave_1 [ 840.904574] protocol 88fb is buggy, dev hsr_slave_0 [ 840.910306] protocol 88fb is buggy, dev hsr_slave_1 02:31:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'vcan0\x00'}) 02:31:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 02:31:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x12, 0x4) 02:31:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)="ebc2", 0x2}], 0x1}}], 0x1, 0x0) 02:31:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="3b0000000200000000000000000000000000af"]}) 02:31:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") close(r0) 02:31:24 executing program 0: 02:31:24 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000009100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000009280)=[{0xe00, 0x0, 0x0, "54a89b1104b401814974e7b2892f2dfc9cc941a9f41a00bd9dbb89913f521aea850beb0762a0fdfc036719fe4b879d4f4e9afa4d1ab7adf2793e87de8e370d62cb040272e68459c824808f9a3230f957668970e464481a0aae9157e960deb37907a4ca9a55ab579b55386d2e8546903081e28b82c56fe9db1ce848797285e6454f9ef86d3da70fdfff61e7c1f766d304e00e6e47bb5616e67247854451f5591664ca8f9b789d588718b2624da7d9921fc1fbfdd5a789898b36a0ed5428d662511f2330b7222c15689582904ccb10a960a59034cf9f05589e7dc0f2a0bd2b681e4b350d87f5922f10f423d9e7e9201ed842eaeeb2176be22599a880cdcde9489c09721db57c55e1e67fae89ee1e4f3f56965b135bef409fa3e38cd6821d0a22eaea3004de49e86f250ee8d6a4a75ef89526de722a1a64ccd60dfa67f772ca975ac246b454c1adcee2e2dd496afd62fa65123d5e0f74c4158eafa3b2f7804f9bda4553394d55752f91f0aab682fe6196d1775df039565fec9c262d10338fa3037139a2c601a398904a1e95e03894afeb15c09ced3b4918ae5eb80f4e83e86983cbef55227198990f4ac13134ac0da45790d5ba9e7cf43e9e5af3428889ae1b740f8d3b8e789d2714ad32022d3f3c4f4547ef10c738181439bbcb39048cf0fe6e89aca55c7a8793ac6eba00fcb3079cd209af62f8676b556ae3a0bc6e599994e0ad4b8ee40924973597288ac56eb06e54f479b114fb0ff9bf0a9b085d09618f7b15132f5d0dd062a48c36941d1aa9e914b71d6f251ec4b731b968cac8f94a82d1f57af21de9d5de4e54f30602d2f454465b1b0b7f6fd62a0a7057abb3a4e20a734e0eae4f63c475465f0397563c27ae4c37a387fc2d685633cd4d793cf6d4184c1bdc626552d9535cf0033f2b5bba2df2520b34efe0b8518a0989a5736e70a112b719c30fd4c0a2e0d3df48a980b3e1c0ea55603987bab3a3bddc191a958bc01e5f349f54f3274bdaf49260710ed03f4cf6f118bd53e8870230967b7ca0c5239495e5e87d05e028f3381cb2fafbf3c4024e971bec18d19d7a1eb63f444ea961b237d33ffe7005c3dd8395020a15332bb3a1a949638b92ae226c3816dfee4413c07317aa6937272462558c2c55291a0af020a548fefc122900224c2834da46120760ed2af71ab1f3c725dd41b1b119695a13e069a43555b803e7fd74d3cfbb3df14fce39c0fcc4b710891ee099d1f4226109a921093ea3631829ebd919744649983667a8654616d87c42b6231ee454cdae73fa4f8d7fb6a52969eb6a379d265287b598bf88b18e87336ce7d21071d06a0724f578d38398d5318f7791402acf4fbc063d8ead8ffde9449368929b18f7219195bc25d9aa5314e70021a29301b1d3b08698b81a61eb78d120c676b4104fb1385532d224c71d8f86ac486a36e3647790f2a4ba8d85b1e1e83c4feaec51f200f188f172bcf2afa31dd0c61e8cb830a73a40dc37c201b2a75c556f66561c3d8a5ab084dfe3814c60df2d8e91b8452888949dc502c38590bf97bb2249db3c77191bb7c2e69162701cd667e24b9a4a45f917a6a2c472c9cd8a4f2c72c3e3843e0f316b01e334cff684c2ac927ce9fb606f387438072ed9a148f04ebd08f4c35d5b01b6a68dc72afd4791e40c7e1c696625c229651738635d04fa1d70ed3d2cf26cada3c0182f5edb98f88a179a77f37b43b915d244db97f8de353427cece67d81c865f8d3abc16e630b7910da5886f31443d6ef72177b2feaf04eb404dfe4e2ea426bbba8898d3b376825bc53ae524b26268521841a7e469fd6365f5f2ebeac52462e552de414738559fc4556a807712105f26284566e33e8998b030372d5cf87c9e2c589a8baa88b5d7f2d1eb061c3fd2203f9801e4c3a93f98fce0898dac0a2ad72cb8b21b94230bdd4dfb6797849d2a50eff6c05697264d9f6c69ec60ce75f89bc0ef05500577eff7884351b12798fe8349156a1b5bf458d94fd8e7a50305518fdebc37034102a16a3d77f2e33bd565bbefe09da7791dc46d6f26bd3036d2c138a292094d8e1b61ebf89244bcf869e4bc7cdc8114f416ec22176ab16b6b15dd4d6337db837ffb1008200e404314b17152ee08f380d2ee62736db42b89dc3ddfb737bd85a02d582819ef5678eb24a1b559be7b4339265be6e2692dd6abb68fb9865dcaecc440ba9a8ddaf7351cbb39812b9f74006e3f317de80856f1837798a4a51c4b01f0b9f8268ab953c439de30a80236e473fc77225ad59e6985fb55cd78285212bcc8025230ebe167166df1239b1d7be64637cd760b472d38e7b98a858eb24161b2b3063a431e658bf6a59175b03977f8b10703acd44566ee9a6eeeb2f3af0728f9eb67bcd38668e0902dcd8c9aee55e180bc9400995d8c86532f5a54f11d7ed572001895f42b50bac1087630ea67da6704d31a186b8d5dbb75c8fa089b50bd5f11500a79d898b59354adccdb4e51866a65b524c7eb5fc5280304a16fb227f87bd01d7d1a80477fecd195ef01ff081c4ff6e9fe3253468add93a4dd914e591ad7aba214bf5371fa04a5c927f948cf59a2a683bd1fefcfb4a9c59df5d7bfe1b8da3016546fe80ff6addf61b4bbd6139d3ec2b4ef69fd11ca07521368835664bdbf7d46afeda5b59bd84faaadb735cb4093baa132ffb595e0d35201321686806f5a288d702215d09c98b95ecb9ae5b5da87c896f18fd2f34f9db8529d0d14dd9111845c90b884c61651f4b6adc1d23347090dbc95a655cf66f26d3d38f863c6a607fc15df9fdee758f41dd8cd85a5e0133f2c0926663560953c1b8f7e6fcbaa57e0b70a4a0a0ff3d0af6c9d61f98ce465277b6d45635227709c3958b31d6b2d0ebd6ea7b7c63228d7b80c3ed9062ba2079622493b4288ef6d3d1d0867b13aa29a269c84055f1e4cd8ce998c0ec24dcb359beb9fb800e26adbac6f10df0447ab063525257ece270fdef5ecd94e6629adeaab5b0304b7e256c32137bb9e94730dd023deef0d1782ec6743f276b41ddd15e000f8a4a196d00fe37184053a673e93952d58fa5bcc8d908d16ef0d3bb34126f56fc867bfed0b1d278e1b30f76f400100dc78818f181a8c4713d7978346104ac1050efb7eea8e22309c4d4a8426e9254604d20f0fc59236367d5f5f60d316deaced3fc98bebe60b203fada75e5b37e642c6f232446a849bec8ce2ac052ea843a309e7bbb61e4f76e26a1d5b4f54a8940d5f13e22918e9bb0701ca07e44d0cc00e8e7902a75123bfae2be76793ca24a9787a973bdf2f6dd8aa2e459339511915099ff9b79d71ec7c074e969494a9120a2b46ecf618909997fd30593cec2d56cd166cea4aed6a2eed38e1f98d49018d2229bac8d81e85ff624295b726bd9e9c905cc70ddd22605e0ccafbe7d0080377f7ec8ba20d64f507cb13883aacfe833697353cb015194a9c423952b3e4e5fa95fa0025851dd7a7fc01cb06efcfeccd82de3fc29067ea8c29e49399273f1ad9abcd0a3f4bbde924a029fb7f47fa01b9f12ab900a6040ec55b730a887e9175e7538538d57aafeca0bb83a3d99e78424311126e0a5de4c2175ed338a4de80ba190b3a55276577743ae566c7d621cb1d2287f09e1a1ba9887fe74fad753e02004713b2c70ba359a285387cb3cc03b4ec38ab38e8a484bea114900315c5bec30305fc70f5c1a944c1ad65bd2b74ebf88d218e7832a6b331596bb7093437880c5a575b658a8413a110209206a5441fd39474a395b94b04041aa7746c9f5f9e1ed8f84037b7f94c123c40ad36db6387f59255ceac92d82b5a0e465fe377839919b1452f3dcc5b622fe440597a37262c024b0fa87fa55b298ad4bafdc02302c28d6460da53021eb29e7f6d7991288510db5df7ef8ccd02e3ed53ba33839b80848162404d875711fa01d19c55e889fa96b945b70d48f5013c399df7bee211be0a95e8834511eee68cecfcdca3a5e7103b62c6ca64cd3f6323e462025d16031420a5f20647cdf570292b6e1ab61ecd0dd49fd51626c09f06d52f44889159bc60736210241feefedbd7c82925af7c8ff772c3f2ab489f7add7d60631123472849d03a4c35b59bd74588dd494327bf0aff3e6c59661769f40487baf234df41318cacb29eb81e1c0f5187e33388801f9be5f3d770f10d4ad7b1b1ea8329bcb58471f71c9ea560f9f37ece43eba7de5d13d0c08547071245a9b6a54f99122d925b31b37603d831d1396e34470fd31c4056da297f2b00f0371b0ffbd4ffdd7a438d0f5618dfd4eedb18701047e25a85470bd62c820499d783c30827134c6ede8f3b3dde7bb4dab20d6e7a1e14e199f88ae9018ef7626b6185d37f4d767826c1373e0e4f563b72986e0c8b200c09022c59954a0f225fe33100ce9b7538f0ca8ec0a74b9f4a86299b5f951ab6c1d0000c35325ad9b6a621368df95cc099df87f9e8206e772cddfee69dc7e055f19a4977ea1d4a15ed5cd42553b5f3ef105d3193d43448013eb36d19df75985e29402bb0920e354198eb4af006c0931028f7c38b95e55aa9f6dc6d62030c81f57297e8e6e8296f6a853d2d1d92a0a7af28afa3b113949cdd1adca26d9dcabc58b66f2c18d3d77b0548eaa76deb1d3e724eef8440bc9ff4f901776c38a73168213815ac1355a71504e86dae8181b343ca1f8e423dfccba4efddc833d6a4df25370b54a6e816b6673f2a8a5d5a57689804f3cedf5a1c8cab8ef2573dbf63a4861dcce4f2b8e9bd4eeaac4e2afe6671f07874c73d86c7d919cc7162ad6b8812c89c47d446b217ba3d05e40293729060d25453b98ee21df43cefc139ec3225748548bd76832ce0f85cd03ef741cb2600eac4b8f3f85f7bff3eef07f4a3a21ac4df1e5e2b134f60e208e7d754da2db9e64ac7a2b2d2846cf3819751bd0a39efe2975c394da73f1b8d571e9ba2240cdce089e15984ba300f32faaab6baf3c8f5d82885f96cd662bb12d3083780f30c61a251774bea4f6d4a60832ea30109c37d3da421a6d76fa3dca293cb6af285b61058e252a561d26198c79f31a38ecea775ff82"}], 0xe00}, 0x5}], 0x1, 0x8000) 02:31:24 executing program 4: rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'ip6_vth0\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet6_buf(r0, 0x29, 0x80000000000040, &(0x7f0000000080), 0x2b) 02:31:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") close(r0) 02:31:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x200004003) io_setup(0x9, &(0x7f0000000200)=0x0) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x0) pwrite64(r3, &(0x7f00000002c0)=' ', 0x1, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:31:25 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000c709c18586e2c03c112d020000010000000000000000000000197f24acc233eeae0750e03690e37c"], 0x1, 0x0, 0x0) 02:31:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\x9b\x84\x05r\x13r\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5\xe9\x01\xd2\xdau\x8d]\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\xe8\xf5\xeb\x84_\x06\xc2\xb4\x83?\x0f\x84\x93V\xf09\x19(\x06\x00\x8f|\xe6lr\x88A\x04\x1a\xfeW\x05\x95\x03\xebZx\x19\xe5nQ\x80\xb4\x9a\xca\xd4Yd\x89\xf4E_,\xbaX\xeem)\x81G\xdf\xab2V\xc7B\xc1\xb6\x9fgy=\xfdj\x9bM\xb8\x88\xe6F\";\xe7\xfb\'\x17 .\xa9V\x11\x8f\x19?\xb8Af\xc26\xfd\xaf\x97\x16\xedQ\xbd\x15\xd8\x1dC\xb8\x9e\x1c\xec\xab\xcb\xa5\xd2\xe6/[>\xc8\xaf\xed\xae\x87\x12\x18\xff\a\x00\x00\x00\x00\x00\x00\x1d\xb9\x8eXV\xf1z\x93\x0f\xe8d)]\xa8\xae\xbc\x0f\x7f\x7fV\x80\xe4\xd3\xf7\xad\xe2\x1a->B\v5Ea\x80\xb1\tT\x9eN\xf0\xe1\xb5V\x91\x03\x009\xce6\xa2H7)z\x9b\x9fzgK\x06_o3\xf0\x01\x00\xf4\x84\xf0M\x8b\xba&\x89\x91\xd3d\xecZ\xc18\xba.$\xb5\x933l?\xf5\x16\xb1\xe9=\x9a\xb7F\r*\x89\x93\x8f\xb7`\t6\xd9\x9bjy&\xdd\xfb\'\xe0\x96\x00\xc5\x03DqjA\xfd\x12\xd6\v\x05\x1d\x15\x11\x9fq\n\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000200)=""/48, 0xffffffffffffffd2) 02:31:25 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="64869c37be72e4fddd7e0ae16087dcf944e3bd1a2db8fa8e584174f9f041d50a1a610268091339953aa7dc622e785b1102b8c283596db9552b33a9e61cbe8fe953baf566518ceaa2c684bd2f4ff174569d6c7a15acb7d22ac7217832234333f003166344866296544c456ef653eb7e609753240371707ce958005241b6d46a627c322c62b2f2728cbd10f6732a9022effb4cd1687d4d7c321cdcedac10ce759d1a8372c3eff9846b38f66d5747fb959cfea1fd5780d4ff289928e1783d8886bea5b73abbc67e55ed09900b17485b3e4286acf3aa8b77298eca8f113ae03641f5ecc629e13fdd91dda988bc16c10ddeeffd2f9a31b0baf36a5ffc0d02005e3e6c1f9027ca"], 0x1, 0x0, 0x0) 02:31:25 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f49c2a77033bdb9072bff9f5073"]]], 0x8}, 0x0) 02:31:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000180)=0x1e) 02:31:25 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad"], 0x1, 0x0, 0x0) 02:31:25 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab8"], 0x1, 0x0, 0x0) 02:31:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r1 = dup2(r0, r0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000180)=0x8, 0x4) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)=0x9) 02:31:25 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9d"], 0x1, 0x0, 0x0) 02:31:25 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b29a453bc85247288788994dbf3758b588"], 0x1b}, 0x0) 02:31:25 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:31:25 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="64869c37be72e4fddd7e0ae16087dcf944e3bd1a2db8fa8e584174f9f041d50a1a610268091339953aa7dc622e785b1102b8c283596db9552b33a9e61cbe8fe953baf566518ceaa2c684bd2f4ff174569d6c7a15acb7d22ac7217832234333f003166344866296544c456ef653eb7e609753240371707ce958005241b6d46a627c322c62b2f2728cbd10f6732a9022effb4cd1687d4d7c321cdcedac10ce759d1a8372c3eff9846b38f66d5747fb959cfea1fd5780d4ff289928e1783d8886bea5b73abbc67e55ed09900b17485b3e4286acf3aa8b77298eca8f113ae03641f5ecc629e13fdd91dda988bc16c10ddeeffd2f9a31b0baf36a5ffc0d02005e3e6c1f9027cafb7a5a56eaa72c27a259991c7f06dd3cc845389e385cd247e8dcb23a09cdeafd54702157e60de9cb37ccd23503fd01cfa931fd81b0c1cfcea90ab7ad2654f9bb3fb6c6331b"], 0x1, 0x0, 0x0) 02:31:25 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b29a453bc852472887"], 0x13}, 0x0) 02:31:25 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b29a453bc85247288788"], 0x14}, 0x0) 02:31:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:31:25 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b587022f3c1a70dfb4a7e42f4d969d348234aa28280e62eba139f5c6be7347a4f3d9a4f0bcd5a2e6e6af71f0e645ac7e492b0d04db34e30f6bc29154221969c8f8b9dd6866fae10657449f198ab0013fe5d8b06a74589d95a4e476d6ed123673a513fb8f263fb574933040235da6e520fb8c9fe2849245bab807b859a67ebc7e9aad7bf0bfb4d7ab012636aebbea0c8b1ae073fdc78298268a800e01902e00cbfd212fb88273835d97094d1b"], 0x1, 0x0, 0x0) 02:31:25 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b29a"], 0xc}, 0x0) 02:31:26 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a0595e0556cd35667719a0100000000000000cb4f11d1ecc5db8583cb9f15640c3c"], 0x1, 0x0, 0x0) 02:31:26 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:31:26 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753240371707ce958005241b6d46a627c320000000000000000"], 0x1, 0x0, 0x0) 02:31:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0xc, 0x209e20, 0x8000000001, 0x0, 0xffffffffffffff9c}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)='!', 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:31:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0xc, 0x209e20, 0x8000000001, 0x0, 0xffffffffffffff9c}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0, 0x1}, 0x20) 02:31:26 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 02:31:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 02:31:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, 0x0) 02:31:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) 02:31:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x4, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x18) 02:31:26 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e00010000000000060005001200", 0x2e}], 0x1}, 0x0) 02:31:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), 0x0}, 0x20) [ 843.555498] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'. 02:31:26 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffff7ffff, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x3000000]}, 0x48) 02:31:26 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) socket$kcm(0x29, 0x0, 0x0) socketpair(0x80000000001, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)='0\x00') 02:31:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0xc, 0x209e20, 0x8000000001, 0x1, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000000c0)='2', 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:31:26 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e00010000000000060005001200", 0x2e}], 0x1}, 0x0) 02:31:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0x2029}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000700)={'eql\x00', @ifru_ivalue}) [ 843.956738] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'. 02:31:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x4) 02:31:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$unlink(0x9, 0x0, 0x0) 02:31:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f233c123f3188a070") keyctl$read(0xb, 0x0, 0x0, 0x0) 02:31:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 02:31:27 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e00010000000000060005001200", 0x2e}], 0x1}, 0x0) [ 844.448219] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'. 02:31:27 executing program 0: socketpair$unix(0x1, 0x10000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) 02:31:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) write$binfmt_misc(r0, 0x0, 0x0) 02:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x1000) close(r0) 02:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 02:31:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:31:27 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e00010000000000060005001200", 0x2e}], 0x1}, 0x0) 02:31:27 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) sendfile(r1, r0, 0x0, 0x2000006) [ 844.774120] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'. 02:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 02:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x1000) close(r0) 02:31:28 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e00010000000000060005001200", 0x2e}], 0x1}, 0x0) 02:31:28 executing program 3: pipe2(&(0x7f0000000080), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2}) 02:31:28 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x830) r1 = memfd_create(&(0x7f0000000400)='+\x8b\x8a\x16\x11O\xdd\xdfk(\xc6\xcej\x1b\x80>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) 02:31:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x0) 02:31:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000073) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 02:31:28 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e00010000000000060005001200", 0x2e}], 0x1}, 0x0) 02:31:28 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file1/file0\x00') open(0x0, 0x0, 0x0) 02:31:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$get_keyring_id(0x0, 0x0, 0x0) 02:31:28 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:31:28 executing program 2: socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e00010000000000060005001200", 0x2e}], 0x1}, 0x0) 02:31:28 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 02:31:28 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x4f06c1cd) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file1/file0\x00') open(0x0, 0x0, 0x0) 02:31:28 executing program 1: readv(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 02:31:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 02:31:29 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:31:29 executing program 0: mkdir(0x0, 0x80000000025) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000640)={0x0, 0x0}) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000080)={&(0x7f0000000140)=""/156, 0x9c}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400000, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000440)={0x5, &(0x7f0000000040)=[{0x8000, 0x2}, {0xfffffffffffffff8, 0xffffffffffffff7f}, {0xf}, {0x7ffc, 0x2}, {0xffffffff, 0xffff}]}) sched_getscheduler(r0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) poll(&(0x7f0000000140)=[{r3}, {r3, 0x100}, {r5, 0x400}, {}, {r3, 0xc}, {r3}, {r5, 0x2000}], 0x7, 0x2) lsetxattr$security_evm(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.evm\x00', &(0x7f0000000600)=@md5={0x1, "99552ed56c9b0048c2a1bd4622148a58"}, 0x11, 0x2) syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') write$binfmt_elf64(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c460304013f060000000100000002003f00ff7f00006b0300000000000040000000000000005a030000000000000000000001803800010000000600001004000060010000000200000000000000e0ffffffffffffff07000000000000000400000000000000fc00000000000000566dd223000000004500f11ec9d9d8175e760d8b17c80dc40b20b0acdbda26181d16c509365b936fc0faa459bb1e6e28ba6a2a6ddecacb9243aab9f226b429ce0e890241d2eff00b8c00d151ba1c0d947783db9c7b24d1a7d746697a8bd600c0574c9e6c56acc83d9087a60dc2b43311fe77ace62badb5977c93ce2e2cbc0a4825ebcc046785c3e64a2b27940a2f2f0de738e91924b1de9549be73ace377aff1aea43bd6c3d09c685833a962d1649c2c2a48e4d48d6aefc16681677f3bf87d06e655b896ef88b907155dc11ee54122f0a96c72e50e82157ca973281845a4bde30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5eb7d53d1ef99a6ec7525200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000007e91a408166a2f7073a008a9fce12780d96c2fab417f525761f8dd4eb3808803db1d077cd23eb0ac161fc2e1064afa70dd7461ec73a483b105101f2cb8a688b8b121530c38681b0504a7933719832befd8f032dace587d971af352e9"], 0x3ac) r6 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000280)="03a17080f881aaf109470b57d27c9937fbd3fbc8416efab5ef092df4b1fac327c0722036ad24f6e62d4a34836a81d1ae77ba35f3bafc4f2d2de50b33e03a20cee36a8575e35ab3e685debd890ef5830a101e9f05bf853fb2beb9a80d501f83a7adaf40142e386ad5cf46aac0616c2c993dedbbb4fd3ebcd199fe8f7ef7cd0dec9da48cbdf1eeafaeb7cf530f167018da335b2ee147a4bcc8a3331c38b6c55e5316fb44627f9573b958299c83b9e8a8e07bc7d0015c58ecdf5d4a878e7703ccfd4f959c90152e5833f181be41", 0xcc, 0xffffffffffffffff) keyctl$update(0x2, r6, &(0x7f0000000380)="38fb4986c3d595e62605a514f490", 0xe) getpid() getuid() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000400)=0x1e) syz_extract_tcp_res(&(0x7f0000000000), 0x12000000, 0x9) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfffffffffffffd75) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setuid(r8) fstatfs(r2, &(0x7f0000000480)=""/206) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000180)={0x14, 0xd, 0xb, 0x3, 0x9, 0x9ef, 0x5, 0x0, 0x1}) 02:31:29 executing program 5: listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:31:29 executing program 1: 02:31:30 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:31:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 02:31:30 executing program 4: pipe2(&(0x7f0000000080), 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0) 02:31:30 executing program 0: pipe2(&(0x7f0000000080), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2}) 02:31:30 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:31:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2}) 02:31:30 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 02:31:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0) 02:31:31 executing program 5: 02:31:31 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) 02:31:31 executing program 5: 02:31:31 executing program 1: 02:31:31 executing program 0: 02:31:31 executing program 4: 02:31:31 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) 02:31:31 executing program 3: 02:31:31 executing program 5: 02:31:31 executing program 0: 02:31:32 executing program 4: 02:31:32 executing program 1: 02:31:32 executing program 3: 02:31:32 executing program 5: 02:31:32 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) 02:31:32 executing program 0: 02:31:32 executing program 3: 02:31:32 executing program 1: 02:31:32 executing program 5: 02:31:32 executing program 4: 02:31:32 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{}], 0x1}, 0x0) 02:31:32 executing program 0: 02:31:32 executing program 5: 02:31:32 executing program 3: 02:31:32 executing program 4: 02:31:32 executing program 1: 02:31:32 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{}], 0x1}, 0x0) 02:31:32 executing program 0: 02:31:32 executing program 3: 02:31:32 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xfa) 02:31:32 executing program 5: 02:31:32 executing program 4: 02:31:33 executing program 0: 02:31:33 executing program 5: 02:31:33 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{}], 0x1}, 0x0) 02:31:33 executing program 3: 02:31:33 executing program 5: 02:31:33 executing program 4: 02:31:33 executing program 3: 02:31:33 executing program 0: 02:31:33 executing program 4: 02:31:33 executing program 1: 02:31:33 executing program 5: 02:31:33 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd3", 0x17}], 0x1}, 0x0) 02:31:33 executing program 4: 02:31:33 executing program 0: 02:31:33 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/dev/zero\x00'}, 0x30) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x120000) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040), &(0x7f0000000280)=0x4) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f00000002c0)=0x5, 0x4) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x248, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x45}]}, @TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @ipv4={[], [], @empty}, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @loopback, 0xa1e5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @mcast1, 0xffffffff00000001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6acbaf14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x0, 0x400000000, 0x5, 0x8, 0x3, 0x7d, 0x7e9d, 0x2, 0xfff, 0xfd, 0x1, 0x2}) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x10000100}, 0xc) 02:31:34 executing program 5: 02:31:34 executing program 4: 02:31:34 executing program 0: 02:31:34 executing program 1: 02:31:34 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd3", 0x17}], 0x1}, 0x0) [ 851.028102] print_req_error: 119 callbacks suppressed [ 851.028125] print_req_error: I/O error, dev loop0, sector 768 [ 851.094052] print_req_error: I/O error, dev loop0, sector 0 [ 851.099921] buffer_io_error: 118 callbacks suppressed [ 851.099938] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 851.113138] print_req_error: I/O error, dev loop0, sector 8 [ 851.118903] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 851.126826] print_req_error: I/O error, dev loop0, sector 16 [ 851.132768] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 851.140501] print_req_error: I/O error, dev loop0, sector 24 [ 851.146443] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 851.154263] print_req_error: I/O error, dev loop0, sector 32 [ 851.160107] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 851.167950] print_req_error: I/O error, dev loop0, sector 40 [ 851.173876] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 851.181729] print_req_error: I/O error, dev loop0, sector 48 02:31:34 executing program 5: [ 851.187674] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 851.195584] print_req_error: I/O error, dev loop0, sector 56 [ 851.201419] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 851.209233] print_req_error: I/O error, dev loop0, sector 64 [ 851.215183] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 851.223030] Buffer I/O error on dev loop0, logical block 9, lost async page write 02:31:34 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd3", 0x17}], 0x1}, 0x0) 02:31:34 executing program 5: 02:31:34 executing program 0: 02:31:34 executing program 4: 02:31:34 executing program 1: 02:31:34 executing program 3: 02:31:34 executing program 0: 02:31:34 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001", 0x23}], 0x1}, 0x0) 02:31:34 executing program 4: 02:31:34 executing program 5: 02:31:34 executing program 1: 02:31:35 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001", 0x23}], 0x1}, 0x0) 02:31:35 executing program 3: 02:31:35 executing program 0: 02:31:35 executing program 5: 02:31:35 executing program 4: 02:31:35 executing program 1: 02:31:35 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001", 0x23}], 0x1}, 0x0) 02:31:35 executing program 5: 02:31:35 executing program 3: 02:31:35 executing program 0: 02:31:35 executing program 4: 02:31:35 executing program 1: 02:31:35 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001000000000006", 0x29}], 0x1}, 0x0) 02:31:35 executing program 5: 02:31:35 executing program 4: 02:31:35 executing program 0: 02:31:35 executing program 3: 02:31:35 executing program 1: 02:31:35 executing program 5: 02:31:35 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001000000000006", 0x29}], 0x1}, 0x0) 02:31:35 executing program 3: 02:31:35 executing program 1: 02:31:36 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x8080000001, 0x4) r1 = accept4(r0, 0x0, &(0x7f0000002a80), 0x80000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002ac0)={@empty, 0x5, 0x1, 0x1, 0x0, 0x5a7, 0x10000}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r2, 0x0, 0x43ffe) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) 02:31:36 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000006161180000000000616200000000000085100000010000009500000000000000bf100000000000003c200000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f00000001c0)}, 0x10) 02:31:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$session_to_parent(0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x0, 0xad, 0x6, 0x4, 0x0, 0x52d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7}, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x77359400}}, &(0x7f00000005c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)) r5 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) prctl$PR_SVE_GET_VL(0x33, 0x15351) 02:31:36 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001000000000006", 0x29}], 0x1}, 0x0) 02:31:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000740)=@v2={0x5, 0x0, 0x8, 0x81}, 0xa, 0x2) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) 02:31:36 executing program 1: 02:31:36 executing program 4: 02:31:36 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001000000000006000500", 0x2c}], 0x1}, 0x0) 02:31:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) r2 = socket$inet6(0xa, 0x3, 0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2200, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2, 0x4, 0x101, 0x1, 0xfffffffffffffc0e}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000002640)=@assoc_value, &(0x7f0000002680)=0xf7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002d40)={0x0, 0x4, 0x3, [0x3f, 0x4, 0x6]}, &(0x7f0000002d80)=0xe) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000003a80)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000006ac0)={0x0, 0xca}, &(0x7f0000006b00)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000006c40), 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x5) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x180000000000000a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmmsg(r0, &(0x7f00000002c0), 0x4000139, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000000c00)=@nl=@proc, 0x80, 0x0}}], 0x1, 0x0) 02:31:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffe14) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, 0x0, 0x0) 02:31:36 executing program 1: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 02:31:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x1) keyctl$session_to_parent(0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x0, 0xad, 0x6, 0x4, 0x0, 0x52d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7}, 0x7) timer_settime(0x0, 0x0, 0x0, &(0x7f00000005c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)) r5 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) 02:31:36 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001000000000006000500", 0x2c}], 0x1}, 0x0) 02:31:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(seed)\x00'}, 0x58) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/254, 0xfe}], 0x1) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0xfffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x3) 02:31:37 executing program 0: 02:31:37 executing program 0: 02:31:37 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e0001000000000006000500", 0x2c}], 0x1}, 0x0) 02:31:37 executing program 0: 02:31:37 executing program 5: 02:31:37 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e000100000000000600050012", 0x2d}], 0x1}, 0x0) 02:31:38 executing program 3: 02:31:38 executing program 0: 02:31:38 executing program 5: 02:31:38 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e000100000000000600050012", 0x2d}], 0x1}, 0x0) 02:31:38 executing program 4: 02:31:38 executing program 1: 02:31:38 executing program 1: 02:31:38 executing program 4: 02:31:38 executing program 5: 02:31:38 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x4, 0x101}, 0x91) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x18) 02:31:38 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000058008100e00f80ecdb4cb9c00a060ac0fe0cd300e8bd6efb120009000e000100000000000600050012", 0x2d}], 0x1}, 0x0) 02:31:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto(r0, &(0x7f0000000340)='u', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000e80)="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", 0x411, 0x0, 0x0, 0x0) 02:31:39 executing program 1: 02:31:39 executing program 4: 02:31:39 executing program 0: 02:31:39 executing program 2: 02:31:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000240)={@loopback, r1}, 0x14) 02:31:39 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x4e52, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x80000005}) 02:31:39 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x6) poll(&(0x7f0000000140)=[{r0}, {r2}], 0x2, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) close(r1) 02:31:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x7fffffffff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$tipc2(0x0) sendto$inet(r1, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x0, 0x0, 0xffffffffffffff06) [ 856.312992] IPVS: stopping backup sync thread 16735 ... [ 856.319982] device bridge_slave_1 left promiscuous mode [ 856.326125] bridge0: port 2(bridge_slave_1) entered disabled state 02:31:39 executing program 0: r0 = epoll_create1(0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x4e52, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x80000005}) [ 856.369649] device bridge_slave_0 left promiscuous mode [ 856.375707] bridge0: port 1(bridge_slave_0) entered disabled state 02:31:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d6405000000000045040400010000000704000000000000b7040000100000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], 0x0}, 0x48) 02:31:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffefe, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000180)="8f", 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 856.562477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:31:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800100000003) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a004e21d7ed3359fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2404000000ff0200000000000000000000000000011bfe0000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2002000000ff0200000000000000000000000000011f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22ff070000ff02000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000000000000000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) [ 856.734488] net_ratelimit: 2 callbacks suppressed [ 856.734508] protocol 88fb is buggy, dev hsr_slave_0 [ 856.745209] protocol 88fb is buggy, dev hsr_slave_1 [ 857.212424] protocol 88fb is buggy, dev hsr_slave_0 [ 857.218134] protocol 88fb is buggy, dev hsr_slave_1 [ 857.224148] protocol 88fb is buggy, dev hsr_slave_0 [ 857.229797] protocol 88fb is buggy, dev hsr_slave_1 [ 857.292796] protocol 88fb is buggy, dev hsr_slave_0 [ 857.298446] protocol 88fb is buggy, dev hsr_slave_1 02:31:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) close(r1) sendmmsg$unix(r2, &(0x7f0000000580)=[{0x0, 0x0, 0x0}], 0x1, 0x0) close(r2) [ 857.542651] protocol 88fb is buggy, dev hsr_slave_0 [ 857.548294] protocol 88fb is buggy, dev hsr_slave_1 02:31:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000100), 0x1c) 02:31:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000380)=0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) socketpair(0x3, 0x80000, 0x2, &(0x7f0000000240)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcdbb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x26a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}]}, 0x6c}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) getsockname(r0, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 861.593577] device hsr_slave_1 left promiscuous mode [ 861.636539] device hsr_slave_0 left promiscuous mode [ 861.698578] team0 (unregistering): Port device team_slave_1 removed [ 861.710448] team0 (unregistering): Port device team_slave_0 removed [ 861.720761] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 861.772260] net_ratelimit: 24 callbacks suppressed [ 861.772279] protocol 88fb is buggy, dev hsr_slave_0 [ 861.782880] protocol 88fb is buggy, dev hsr_slave_1 [ 861.788825] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 861.864752] bond0 (unregistering): Released all slaves 02:31:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000100)=0x54) 02:31:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:31:45 executing program 4: socket$inet6(0xa, 0x4, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) msync(&(0x7f0000953000/0x3000)=nil, 0x3000, 0x0) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 02:31:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffefe, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000180)="8f", 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r2 = dup2(r0, r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000340)="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", 0x594, 0x0, 0x0, 0x0) 02:31:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) 02:31:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1f8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 862.165017] Left network mode [ 862.168146] input: syz0 as /devices/virtual/input/input80 02:31:45 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffffffffffd59) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) [ 862.227982] input: syz0 as /devices/virtual/input/input81 02:31:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f000000e200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[{0xfc8, 0x0, 0x0, "6af5a1a953d62dad0d8d8c92976d8933a9eba19e143638710740093d8a7933aa5bb199ecc15a4df3b274656dd9f616bdedf4219981437b97d5f4da00b96fc5e37e62a52fd9d6d8eb879d910e02d9932c3e138613414716b51c846a11c6fc43266aa5d14785f6b19214ca7720aaeff2daff8aff4789c569761d8aa7e5317853eac980601520a13403285ed4e569d93908d72fe8d71d7c2d48170e9cfe8fe361ee60b17f4f1a5555a1caa1f54e314a35ca9c8e27c3f78a509cff5a4e42a0d90e010a0370d7c75b7c41e0c7a33a79cfcde143e959c3355f2b303f20317a813102a403f504bde2ff2c377efc0a1989e48c86aecff13f40b54dcc15338843a2d65fb2f7e152a4e96bafcd91fce7cb14cd04eb891b84eaca28aaeb5f41295d30ef45179aa92da9c7b1a57cc51b28b48205717695ec4751c8fa702e59d171ca711c689464806312dc61130f774e10be827d2e7bd5d5a7b8dca5800d4c53b9332c292c829f8ef70eadf4d5484ce4b8d064dcabf2afc7728fc35095fcf1b2301770ff066496f424b82c8c9cfb0ffd027a5cbb5af50f48c757c32dbd2648a8f5da6f31095a91e0d46ef828239e341c9c76e7d82d7b8dc271f5453ea887692a9e208c85b65df782e880cd2ddb3454e4daacec8355f676a8c10327a3d1552bf5589c24ade898c81c41df2c7c77611da822fe0fb77b2290d99926617a48222d7ba770fe201c1a39526095849dcd12ea1bdef7ba6a88bd8c6ef7c0335878997cb9db3fbce8bdba15ec2ae35a77ea2ff782943296872d3d91e6e1b6e89bc822fdd7ffe715b218dcfa5b16dc68ed19eaa5058ce8dd7ea824010411170cc3e9289cd7f923d3a5629871767efb8f09538e9bd9e550a1b55dd56e402c0b44e665dc895521434a988706a448b334e91144487156200a0d86bdf358b88da6fca72472f0e9febbe9219ed957b477a02e9c1845c4d9b6f8b4035d486e18f415b50fdd3f229f2e62722bfe97215e0af6ebf6d0bc51e14a49107e5fb5e8f6c9714636a4f8befcc90b24406e1f77d6bee2a55ba6f9b3ffdac1765eb6bfc7b0f45f5c59c58e70baa6b2e171a5dcd30f28b47bb61b13c322cad8ba33ebb8a861155820d539cc6c395d7fd1c96b93c0fd45be1bb099596020f4550f89c900a46eb0604286a8294f29fd1563982b303296a4c4b614d2471f08f189cba238c6acec9a5691b6ba2f1e2e492fbf3d319f0653a9fb83bc907a2584a30df1d891ebb4f660482339f4b3cfc5371540e6ccf77f9beaf3bce9632bf8b109a448bb0f1df3ec9a7c2e5a409d1ae3219126761a2173bcca6a070fb79bc000a78039189d74aeff6c5445afa964987d0de322e086fcd66526a2098b572a23db6f933f1e1dae5f94edce4681f3c16f82f8ba4916e3f6aa0daff6fde232b3f6c07625c67f357d673f2e810f6382eea2a9da4af280b848a09c1eec877ff8f9ab0c318e8a0eed339f45046df2243e853d6243575e7091e23a91e1e385fb0a8db047e64a0326c0e23c82016d61ec05c44fb9bc1902f722911ce64ddcddbae8c5d172270ccddfbbbc0accbc053eff36ffc3c678efaae7bc72190d811ff45fc8a54afd26039a48fabe0efd13dd53fb560d3401c35ff5ae93a6d8ded9bbbf0d68ec3563f8cd9c6d245ede6052d28e850c6002f7991f566198097809c802694745e6a3a7cbfe10ce9b1c2685d3d72ef0385473b9237b269bb10feb2cfbfc5d983d453e7dceae997fb5f43d03706b896f68e07f451eb92bc724c2f612c8d7e08bca65188f8c0641060a3caf38b3ab9e2254239cf47c604765588d31dfdf5c1e27a846c859a18e4e4fc8266094b1d3fb65be1a98d96fa3b989a50f91a93cf064c2e18f6687ab54d6bd2679d90402271a29f4c88a7a520b8a724537b8fa65a6c808e6b9c42a7a3377b9b7e9411045a936a248587f7824087e72bb8fcb328038bb5912fa228e9f322395a065d32e65a1f52d2b35dea77df7cc06dbbbbb54bc2f8dec55b72d2856d2e9bfaf3715883f1c426737b81532795c66c89e57f4822409e661cc2c68f48165c18f2844f513605ab823766314ecd78b3c426ea16fd0805694be6b5ed816c71453b78765054c741f35524b0d0a75930e956676359027f62d54ec9a609289e967753ae418ae908ff6312028e4483921b27c5c277df879a3bbbb56bd15244474b579e5da078c9e33240bc78c40c3d53cc46ed44c9f8c8736bb5f528fe1f6086caec1d73704a37f788372578450115f42f46ab9b4d08689fb000a4ddcea8901a0198abfefad77e77c74094af789629e746cb32f01578560fdcd282e9cf465b007af166ca55ad4d0a0725cf9df4f5c66e5fda2b478dbf6b412ea9dffbbdc7cc5f1801e8de8173ebcc11e1c93b1a470ea4159c90b50cb1e62651cd62b2d092a3c3f473b2184a823b08763081d618ff3e0e32b4d7e014151773254b981c9c0603bf071d336007c9f83add452eacc9f5f9b76bcc3e75e5f44de07342c9e3e817002432f7cbac45495e2fa85b2614c9d572ba940c90e445c227793f83e7606cc8c1338328117784e03cc51d1abf3aa30ce48bf9a502af4c533889a90bd490dcabd9184d64324c98aa2fdf2bf2bc7330e2715c29875e69a2e176c57580e3cbd9ddf9e6583fa75f56309393599225f7079df0562e87ee34c218c56439a9cb190bfe2042dc2bc7c5661ec3734f932e64935cdd454c038bc7b370410c105353d8946d708babbbbc92e51e0f8dc2c1492c74557ced07cf264c5a112a3638a26034d76ceea1db81281f592dc630c9cbe1f83ad814f44bebaf7b050dba3e843bc1b18841d931306c1ede3d470b6192782e5b6a868dd33bd78aff2bcd05cb33bc1a7a2fac7b66e5f7c721f73e883fb4a9c645654b3ea5ea9f81a11b9d6baebe0e67f8db591d8906acff1523a7082d14c1cb4da1bb9639f7474f0b9e81e8323e69017518247955d1352d790f911a8a7d0e30956174050a0193cba5959b2982b47acc627c598107d38d25aff48bea6638878362105d60150e2df22f3eeddacf4f0efdf7494bd54badbcd59ead9c0c07b4f6228f254951fc99b97091be2e923f3934bc1c83f3d3a8216986fc11eb77c93335dba8d9ba519fc2575709ab5dbdbf9e679f17c5047f8e75b3be2113c888e176cd51d8cb0144357d0e813d87af3da3135ca5a13e85e88fe5b2a5f5185217c15453d9c6b74eb0291b5bb39c9da8982a1b7273dc2326d5a5e514a61c63078927acfcf724c12e40910386bcd3e3dd64d9fd275ca6d8191f33199cb7dc3346a5e1df4fe480e81957504dde9d132a4b2a3d78bcde5753a57a9d573ab746d596bcb5876d15cb6b11ebd5220fab037d5d819dcd46e218bc71983801cd3010eef3bac1edea8f9637ef04150464617b721bf529fa1ff7f03ad190f33d2f95770f6bb2f7da0e49a1043dc7cee0b06c21e1e615a5139986ff3afe619f50cc06093bee0dbe21e5a7fd0ef5400d2f8fd329dd98a0ed5a16f1a576d390b9df79b6bd4a3ef10751b46ea6a5c56a9e0663f88039e92cc29b41e66dd6fb44206144c3e75c4b127d3631c148fe1bcb3493717a5975695e2814b82c6e2427da6be4c7fea8baad365afb549ee831a013ed651b50f02d8d3dc1ca1d21ce81afd01c222b960601ba1e2e95df1f877efd1d6b1eb907bce9ed853a1da0f16cd2b14a87cc5cbcda5a25acbca5971848ede188a664d229d313eb51f07191e73577e688c1ccf9219231f58d4637938c5763fb1782c7937e5bae5a9278c055d36aef55781ac2037985227a4919ebc56d99abc11b883a7c2b33f8f7ade150eb7361d57d9399041e397bc30c6082b3442ee873400863332c61ab945570b228fe481446800d138a552fd7b5c80ee964dd8911f2e6f8aed7d198e59b14fe40164fbba7e27b01185aebf2962c35f0d1c8bdd10ba728e7edd9d1d68215ee7a4ba1f25e553cd1b3fc9e2a6d9c34ed32815de051062875c79cb33bd199f6685cc4c29a6c63fca12e9991233c74b8b67eb49f1bf5fccfd5d54d2aa3691db53f5d218b4b805e1d677d031db4be201ef1aee98de767a8bb82ea55e38fe95a72f25fc82f29733b6fb3877dcb1aee9ceaad030eed68b6a853b8878c4889cd156f96df8a6d843a5460732e312f8f6fa1a2443c71c8b4d6bb7446b5c5f95f1693d04ca7c1c6ca2cc14f165e62c2f1c300cab5ad254e76a6ee83b142c598af21a6c9549a3dd9956cdb5a1b781a30733d509f5f275e9ca88480035aa51177fbc0a1f3aaf1f8f96ccdb3f383da25ce7d48a8415e1cd84e6ff0cfe5aa49f1c8b70de48c31eb046b5fbd0c0a18c848a9efdb126023acac3159ef5d5a8cded38c71444b24e5da8ca85f85d7e9b93f971669f91bc8e76fbe7921311229674f250d89a3665dd58909f67589dce813f63691fe9ac568d7ac83634c848e69e89c1074980e33996d19c391ba559bd085eedf2de22893f7a94d5b1cce01a4eb8390fc892c0b1c2a286edd2c1f37484833d4a9a7de9fcecf8dc575598d1bb9417dde3cfa374c499f277e4a22ba11a97cbece7212a63970c98d095d68ef030aa2d7ccc344ecc4d6ec2cb62eb735ac2ed50c731fbeca4163ac469ad1c155ecc0d6719e4fbdbecedbbb31c7e7a4601363d58b756714f180e31c3cc4edbe670679751f1c14a1f9a1419fef3f7db3c1c1c63d79334e0ff222c0f0ecc49e589a38205c127bfb651b8b7f77d0d5c5aa796e35ed57a06928bc48fa1323cf4f5a217188bee2580768af5f8430c727860e34d9138d2a7f9a11002fdfac5eb741c7c7812105cff1d0186870b0b3e3235e75b191c1502de53a3ae2344320cbfe77a3e2c07e01a822a21aff7c1f0c547e1fe589220e460a2d321fb590c3d298dcfde9120bf72e2d70ff4d10fc44fe1caf40b0e9eb3910ce70fbf1b8575b4b3e00fc319a62dd3c6704b1f20bf0ac6329453876dc2a72be3a4587de3389bf73ef3b93877dddffd75c88bba97bdfb0fa7bc108660bba5d43f4b2bddf2d50612fe7b380ac8b2b87aa9b416ec63b85513fc40e8ba7db28459fd371df0674fa7c074d148de46ab05577803edbfd21a8ec258b1a9e33b575923bd43cbc6e927c1ace9f2f727e2ef9718082692854f95e3ca5052cc8ac27e5650c89082684b15790d25daf75e5fef4becdc72c38511ee4ac11875322a184d38b39ce08abbfe38ad0d4509f54b8651eec5e3ef161ab8f2d5928fb4896c739baaa27414f391c041b35067c02e731169b4b65853f2acbc32bfea95ba2d37362fee41b146412ede7d6551caaa0029d45685521bceef5940febf0b8550192b6872643531b3622941aaff855b07461f6887105f65f26cea3e95fa3d7e2bc57b2bec62623abf6309a394aaf3ecfe12a8581b50bdb1231acf51b76ff989e31d64abe34a836790d5404ffac5ede3921677aaae5cb2d5c96c6cbcb5be6a8bd6bdbb380898551faaffda63e954532b06cdbf420864c13da23ea6b3d7e275c9676d3e28192defcf5e98e19d5ec7a7969e2eb2fa2a15a74189dba202602e78011cb6347a7b5323801053c3a73efd598e625abbce9a53fadb5b97db74b62f2a1ba1639de269afc43fe982a1df489408cf83aa2c838b2799c8f48b7e86b984c0c3df2012c1a3a2875e52f402afb92c84d50ad7aaaf493f4b41cf47c7b6e989a48300925c42f16c87316e719d7c8431cbca6cca58576f537eb85b"}], 0xfc8}, 0x2}], 0x1, 0x48000) 02:31:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f000000d700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[{0xc}], 0xc}}], 0x1, 0x0) 02:31:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = dup2(r0, r0) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10}, 0x10) 02:31:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484002"], 0x0, 0x0, 0x0}) 02:31:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000140)=[@decrefs], 0x0, 0x0, 0x0}) [ 862.859721] binder: 26401:26402 got transaction to invalid handle [ 862.866441] binder: 26401:26402 transaction failed 29201/-22, size 0-0 line 2834 [ 862.898512] binder: 26404:26405 DecRefs 0 refcount change on invalid ref 0 ret -22 02:31:46 executing program 1: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x4f06c1cd) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file1/file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)='./file1/file0\x00') open(0x0, 0x0, 0x0) [ 862.915610] binder: 26401:26402 got transaction to invalid handle [ 862.922207] binder: 26401:26402 transaction failed 29201/-22, size 0-0 line 2834 [ 862.937497] binder: undelivered TRANSACTION_ERROR: 29201 [ 862.945859] binder: undelivered TRANSACTION_ERROR: 29201 02:31:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) 02:31:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r1 = dup2(r0, r0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="d4"], 0x1) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10}, 0x10) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000140)={0x18}, 0x18) 02:31:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r1 = dup2(r0, r0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="d4"], 0x1) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10}, 0x10) 02:31:46 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_tables_names\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@xdp, 0x80, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) 02:31:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c") 02:31:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r1, 0x0, 0xfffffffffffffffc) 02:31:46 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 02:31:46 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r0 = gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/12) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x5) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x2001000000000016) 02:31:46 executing program 0: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0xff9f) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x100000176) ioctl$void(0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x382) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) tkill(r1, 0x1000000000016) 02:31:46 executing program 5: creat(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffe59) socket$unix(0x1, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xffffff64) timer_create(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x2e2) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 02:31:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:31:47 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a0595e0556cd35667719a"], 0x1, 0x0, 0x0) 02:31:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) keyctl$session_to_parent(0x12) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:31:47 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9da8ebe6923bc8e9bb184f2c6d7630103b"], 0x1, 0x0, 0x0) 02:31:47 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a0595e0556cd35667719a0100000000000000cb4f11d1ecc5db8583cb9f15640c3cbf982435e3ea6e139dc30a989e967c2ec6cfc3081c2979"], 0x1, 0x0, 0x0) 02:31:47 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a0595e0556cd3566771"], 0x1, 0x0, 0x0) 02:31:47 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000c709c18586e2c03c112d020000010000000000000000000000197f24acc233eeae"], 0x1, 0x0, 0x0) [ 864.268210] input: syz1 as /devices/virtual/input/input82 02:31:47 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f00)) unshare(0x0) fstat(0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), 0xc) [ 864.336119] input: syz1 as /devices/virtual/input/input83 02:31:47 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:31:47 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(0xffffffffffffffff, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753240371707ce958005241b6d46a627c320000000000000000392f39d9b3980e8e07ddb3254ea10cb495226c3ab89d58ec49d7bd5f441cdb58a8764ef1419b4ce8adf8ebdad9a802aebc82323bc763a65db47a7826ddfb8051b0ad1c7048dd9e751f0f44de36edbf52417b046ebe27bf41067338f9dabd68fe05280c03b2c07c0dc4c1b6c6ba33f292"], 0x1, 0x0, 0x0) 02:31:47 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) flock(r0, 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2000000000000003) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5080085f6017afe5348ea0000000000864d72a8d987b4026d876296918a2b35e362c613f350b31d5ade9634d4ee55f1826672d3259193150d503ca3a07dea8a942679c1528f1edbacd283f8"], 0x4c}, 0x0) 02:31:47 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) flock(r0, 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2000000000000003) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5080085f6017afe5348ea0000000000864d72a8d987b4026d876296918a2b35e362c613f350b31d5ade9634d4ee55f1826672d3259193150d503ca3a07dea8a942679c1528f1edbacd283f8ad8d23a0bf1a4e46380968a15a99dfea096b5a1a5cf001"], 0x63}, 0x0) 02:31:47 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e"], 0x1, 0x0, 0x0) 02:31:47 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:31:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'veth0_to_+ \x00', 0x800}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x28, &(0x7f0000000600)}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5, 0x10}, 0xc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/56, 0xfffffffffffffe98}, {&(0x7f0000000440)=""/158, 0x9e}], 0x3, &(0x7f0000000540)=""/72, 0x48, 0x1f800}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x1, 0x70, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x0, 0x8, 0x84040, 0x3, 0x1, 0x9, 0x9, 0x0, 0xff, 0x8007, 0x9, 0x4, 0x6, 0x0, 0x4, 0x2187, 0x6, 0x7fffffff, 0x9, 0x3, 0xffff, 0xffffffffffff0000, 0xdab3, 0x5, 0x3, 0x1, 0xfff, 0x0, 0x100000000, 0x2335, 0x0, 0x100000001, 0x0, 0x0, 0x7, @perf_config_ext={0x8, 0x100000001}, 0x0, 0x588, 0xfffffffffffffffc, 0x7, 0x0, 0x4, 0x3}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000009800)={&(0x7f0000009700)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000009780), 0x0, &(0x7f00000097c0)=""/16, 0x10}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f0000009840)={0x17, 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="88779f7768ce6068"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, [], r3, 0xb}, 0x48) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000780)='cpu.stat\x00') ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) r6 = gettid() perf_event_open(&(0x7f0000000840)={0x3, 0x70, 0x78b, 0xfffffffffffffffa, 0x1154, 0xa47f, 0x0, 0x101, 0x69, 0xf, 0x3ff, 0x1, 0x0, 0x8, 0x5, 0x93a4, 0xebe3, 0x0, 0x3ff, 0x4, 0x8, 0x0, 0x4, 0x68e, 0x7, 0x0, 0x1, 0x8, 0x1, 0x6, 0x100000001, 0x1, 0x80, 0xffffffffffffffff, 0x7, 0xdbf, 0x80000001, 0x0, 0x0, 0xa6d, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x802, 0x9, 0x1, 0x6, 0x9, 0x100000000, 0x7}, r6, 0xc, r4, 0x8) 02:31:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x8000400) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='ppp1\x00', 0x5) 02:31:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x8}) pwritev(r0, &(0x7f0000000700)=[{&(0x7f0000000680), 0xffffff04}], 0x10000000000001c0, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x2b000) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="f2", 0x1}], 0x1, 0x0) 02:31:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000ebff0fdf333f220005001e0001f9db000006000000000000001a8df8fe2c8ce6eb963508008300000000000000000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 02:31:48 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:31:48 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9da8ebe6923bc8e9bb18"], 0x1, 0x0, 0x0) 02:31:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x4, 0x4, 0x9}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002f000000270000000000220095000000000000005c7d4a97ef00337f3ae2f872c14f833d0d54a406a45f462ee9867029e51569eb0d5b44f6b334c856a4aebecd5d74bbcaa4883a371ec0e80700000039d3bed858fc604af4a256f39d7b82a7862a72db70d17d260c6185703ebc251e2f68f19ec9795f837b67bd7b5cf5cac4ced69e340df1eb5434172771d0e224a5d9f6de110c78d745b5a2611cc8e9b018e13c2ba4ac8e7a7719a0ba0ea978f6ae5882bf508ac3eb71221faa7879a167db3833d42521853bd7bfece56f32fdb1e6"], 0x0, 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r0, r1, 0x4}, 0x10) 02:31:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x1ff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x81, 0x200, 0x3, 0x3, 0x0, 0x4, 0x2, 0x3, 0x3, 0x7fff, 0xf21f, 0x4, 0x8000, 0x85, 0xffff, 0xba4d, 0x0, 0x20, 0x101, 0xfff, 0x5, 0x1, 0x0, 0x9ff1, 0x8001, 0x3f, 0x401, 0x0, 0x249, 0x1, 0x0, 0x4, 0x6, 0x0, 0x0, 0x4b, 0x0, 0xffffffff, 0x3, @perf_config_ext={0x80, 0x80}, 0x10000, 0xd, 0x0, 0x2, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x3) perf_event_open(&(0x7f0000000840)={0x0, 0x70, 0x0, 0x5933, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x0, 0xf37, 0x400000000000a15c, 0xbe14, 0x7, 0x3f, 0xb2e5, 0x0, 0x9, 0x9, 0x4, 0x9, 0x0, 0xffffffffffffffc0, 0xb834, 0x0, 0x45, 0x6, 0x2, 0x7, 0x5, 0x6, 0x100000001, 0x0, 0x0, 0x8, 0x0, 0x2, 0xff, 0x0, 0xff, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x9, 0x5, 0x100000001, 0xb04, 0xe1ec}, 0x0, 0x9, r0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000000000000000180000000500000000000000000000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0xc}, 0x48) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) mkdirat$cgroup(r0, &(0x7f0000000600)='syz1\x00', 0x1ff) r3 = openat$cgroup_ro(r0, &(0x7f00000007c0)='up.controllers\x00\x00\x00\x00\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000640)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r1, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="dfef284712f86d8ef760eec9ea1859d9821f75f6b2d7aea695901d6c57481a4fccd02940b6a20c61a804d7f6c82abed5ec9ee1ce6505b93fda9cc000dbe186a49d74f857b5efbe5d545161d072d229edb4b5362a9c294448afc624e8a246834b2a085a5310961b498cb4fc97406206b99352cbe649042f3acec8acf5059de56f51209ab43c0bd60145b5dfaee9574c5174609b95dc704157822c7c329d0a4d45a4fb8e9f0b662fc8898d847b28f7d94358425fd6d6f046fb4b0d4b56519190794790d2a4935253f6006b86ef5e46158b88fc96456a26126965", 0xd9}], 0x1}, 0x48001) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r4, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500)='!/\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2a06040000000000, 0x5000000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x1a1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x10, &(0x7f0000000280)={&(0x7f00000008c0)=""/214, 0xd6, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r6, 0x4) 02:31:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x4, 0x4, 0x9}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002f000000270000000000220095000000000000005c7d4a97ef00337f3ae2f872c14f833d0d54a406a45f462ee9867029e51569eb0d5b44f6b334c856a4aebecd5d74bbcaa4883a371ec0e80700000039d3bed858fc604af4a256f39d7b82a7862a72db70d17d260c6185703ebc251e2f68f19ec9795f837b67bd7b5cf5cac4ced69e340df1eb5434172771d0e224a5d9f6de110c78d745b5a2611cc8e9b018e13c2ba4ac8e7a7719a0ba0ea978f6ae5882bf508ac3eb71221faa7879a167db3833d42521853bd7bfece56f32fdb1e6"], 0x0, 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r0, r1, 0x4}, 0x10) close(r0) 02:31:48 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'veth0_to_+ \x00', 0x800}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r3, 0x28, &(0x7f0000000600)}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fffffff) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5, 0x10}, 0xc) close(r4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000340), 0x12) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/56, 0xfffffffffffffe98}, {&(0x7f0000000440)=""/158, 0x9e}], 0x3, &(0x7f0000000540)=""/72, 0x48, 0x1f800}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000002c0)={0x0, 0x70, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x0, 0x8, 0x84040, 0x3, 0x1, 0x9, 0x9, 0x3, 0xff, 0x8007, 0x9, 0x4, 0x6, 0x0, 0x4, 0x2187, 0x6, 0x7fffffff, 0x9, 0x3, 0xffff, 0xffffffffffff0000, 0xdab3, 0x5, 0x3, 0x1, 0xfff, 0x0, 0x100000000, 0x2335, 0x6389, 0x100000001, 0x0, 0x8001, 0x7, @perf_config_ext={0x8, 0x100000001}, 0x0, 0x588, 0xfffffffffffffffc, 0x7, 0x1, 0x4, 0x3}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000000c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000009800)={&(0x7f0000009700)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000009780), 0x0, &(0x7f00000097c0)=""/16, 0x10}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f0000009840)={0x17, 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="88779f7768ce6068"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, [], r5, 0xb}, 0x48) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) sendmsg$kcm(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="f92ec907ac18865aaa51e2c7cd7fd3f425c935e597a6a3b2c48745a3e0f2afd852834dd01e945db0e86e7b73f2a17f06a26c3f0f951c05289fdc7469b4bb49c623cbb1bf0b02f191cb66e3c3d871b3171b378274beef73e20795b7b2317530b0a4e99e1accff1a1186f3cb11f9bb43aed8d891af85fd9ee372d0374c09358f13b945f35c48ac3fdaa4d95fb3b46858deea13569e240b8699fecf0706b2c0d29dd55669a279ab3024c79aaf568dcdc10bd17b4f6e6e311e1d23d1b4654a15af115c2d054280b37de34dda5c0cda", 0xcd}], 0x1}, 0x800) write$cgroup_int(r7, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000780)='cpu.stat\x00') ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0) r8 = gettid() perf_event_open(&(0x7f0000000840)={0x3, 0x70, 0x78b, 0xfffffffffffffffa, 0x1154, 0xa47f, 0x0, 0x101, 0x69, 0xf, 0x3ff, 0x1, 0x1, 0x8, 0x5, 0x93a4, 0xebe3, 0x0, 0x3ff, 0x4, 0x8, 0x6ba7, 0x4, 0x68e, 0x0, 0x0, 0x1, 0x8, 0x1, 0x6, 0x100000001, 0x1, 0x80, 0xffffffffffffffff, 0x7, 0xdbf, 0x80000001, 0x0, 0x0, 0xa6d, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x802, 0x9, 0x1, 0x6, 0x9, 0x100000000, 0x7}, r8, 0xc, r6, 0x8) 02:31:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'veth0_to_+ \x00', 0x800}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r3, 0x28, &(0x7f0000000600)}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fffffff) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5, 0x10}, 0xc) close(r4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000340), 0x12) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/56, 0x38}, {0x0}], 0x3, &(0x7f0000000540)=""/72, 0x48, 0x1f800}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000009800)={&(0x7f0000009700)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000009780), 0x0, &(0x7f00000097c0)=""/16, 0x10}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f0000009840)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, [], r5, 0xb}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) sendmsg$kcm(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="f92ec907ac18865aaa51e2c7cd7fd3f425c935e597a6a3b2c48745a3e0f2afd852834dd01e945db0e86e7b73f2a17f06a26c3f0f951c05289fdc7469b4bb49c623cbb1bf0b02f191cb66e3c3d871b3171b378274beef73e20795b7b2317530b0a4e99e1accff1a1186f3cb11f9bb43aed8d891af85fd9ee372d0374c09358f13b945f35c48ac3fdaa4d95fb3b46858deea13569e240b8699fecf0706b2c0d29dd55669a279ab3024c79aaf568dcdc10bd17b4f6e", 0xb4}], 0x1}, 0x800) write$cgroup_int(r6, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000780)='cpu.stat\x00') ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f0000000840)={0x3, 0x70, 0x78b, 0x0, 0x1154, 0xa47f, 0x0, 0x101, 0x69, 0xf, 0x3ff, 0x1, 0x1, 0x8, 0x5, 0x93a4, 0xebe3, 0x0, 0x3ff, 0x4, 0x8, 0x6ba7, 0x4, 0x68e, 0x7, 0x0, 0x1, 0x8, 0x0, 0x6, 0x100000001, 0x1, 0x80, 0xffffffffffffffff, 0x7, 0xdbf, 0x80000001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x802, 0x9, 0x1, 0x6, 0x9, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) 02:31:48 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x28, &(0x7f0000000600)}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fffffff) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5, 0x10}, 0xc) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/56, 0xfffffffffffffe98}, {&(0x7f0000000440)=""/158, 0x9e}], 0x3, &(0x7f0000000540)=""/72, 0x48, 0x1f800}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000009800)={&(0x7f0000009700)=@hci, 0x80, &(0x7f0000009780)}, 0x62) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) sendmsg$kcm(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="f92ec907ac18865aaa51e2c7cd7fd3f425c935e597a6a3b2c48745a3e0f2afd852834dd01e945db0e86e7b73f2a17f06a26c3f0f951c05289fdc7469b4bb49c623cbb1bf0b02f191cb66e3c3d871b3171b378274beef73e20795b7b2317530b0a4e99e1accff1a1186f3cb11f9bb43aed8d891af85fd9ee372d0374c09358f13b945f35c48ac3fdaa4d95fb3b46858deea13569e240b8699fecf0706", 0x9c}], 0x1}, 0x800) write$cgroup_int(r5, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000780)='cpu.stat\x00') ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) perf_event_open(&(0x7f0000000840)={0x3, 0x70, 0x78b, 0xfffffffffffffffa, 0x1154, 0xa47f, 0x0, 0x101, 0x69, 0xf, 0x3ff, 0x1, 0x1, 0x8, 0x5, 0x93a4, 0xebe3, 0x0, 0x3ff, 0x4, 0x8, 0x6ba7, 0x4, 0x68e, 0x7, 0x0, 0x1, 0x8, 0x1, 0x6, 0x100000001, 0x1, 0x80, 0xffffffffffffffff, 0x7, 0xdbf, 0x80000001, 0x0, 0x0, 0xa6d, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x802, 0x9, 0x1, 0x0, 0x9, 0x100000000, 0x7}, 0x0, 0xc, r4, 0x8) 02:31:48 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:48 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) 02:31:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) 02:31:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r0, 0x9) getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) pipe(&(0x7f0000000780)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x101) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x1, @loopback}, 0x1c) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x5, 0x82) socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974792e2f6465762f66756c6c00df8ea4a00d794b1ca05daaa106486f1f8a2cee2946d45f1e7d0a462f33953006"]) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000380)=""/212) gettid() write$P9_RLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x7}, 0x7) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:31:48 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x1ffe, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000300)='map_files\x00') getdents(r2, &(0x7f00000000c0)=""/47, 0x2f) socket(0x10, 0x803, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x401, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000000000, 0xb7ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ffffd, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000003740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000003540)=""/141, 0x8d}, {&(0x7f0000003600)=""/35, 0x23}, {&(0x7f0000003640)=""/220, 0xdc}], 0x9, 0x0) epoll_pwait(r4, &(0x7f00000038c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3, &(0x7f0000003840)={0x9}, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r4, &(0x7f0000000340)=""/210) r6 = getpid() sched_getaffinity(r6, 0x8, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'ip0\x00', 0x2}, 0x18) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000280)=0xfffffffffffffffb) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x8000, 0x0) unshare(0x40000000) r7 = socket$inet6(0xa, 0x0, 0x6c88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003880)=0xfffffffffffffea6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'vlan0\x00', r8}) r9 = dup2(r7, r7) r10 = open(&(0x7f0000000200)='./file0\x00', 0x2000, 0x9) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f00000002c0)=r10) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000003800)) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = getpid() r12 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setpgid(r11, r11) ftruncate(r12, 0x8200) 02:31:49 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x1ff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x81, 0x200, 0x3, 0x3, 0x0, 0x4, 0x2, 0x3, 0x3, 0x7fff, 0xf21f, 0x4, 0x8000, 0x85, 0xffff, 0xba4d, 0x0, 0x20, 0x101, 0xfff, 0x5, 0x1, 0x0, 0x9ff1, 0x8001, 0x3f, 0x401, 0x0, 0x249, 0x1, 0x0, 0x4, 0x6, 0x0, 0x0, 0x4b, 0x0, 0xffffffff, 0x3, @perf_config_ext={0x80, 0x80}, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x3) perf_event_open(&(0x7f0000000840)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x0, 0xf37, 0x0, 0xbe14, 0x7, 0x3f, 0xb2e5, 0x0, 0x9, 0x9, 0x4, 0x9, 0x0, 0xffffffffffffffc0, 0xb834, 0x0, 0x45, 0x6, 0x2, 0x7, 0x5, 0x6, 0x100000001, 0x0, 0x0, 0x8, 0x0, 0x2, 0xff, 0x0, 0xff, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x9, 0x5, 0x100000001, 0xb04, 0xe1ec}, 0x0, 0x9, r0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000000000000000180000000500000000000000000000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0xc}, 0x48) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) openat$cgroup_ro(r0, &(0x7f0000000640)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000c80)=[{0x10}], 0x10}, 0x48001) getpid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2a06040000000000, 0x5000000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) [ 866.044818] IPVS: ftp: loaded support on port[0] = 21 02:31:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x22, 0x0, 0x0) [ 866.291184] IPVS: ftp: loaded support on port[0] = 21 02:31:49 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$P9_RVERSION(r0, 0x0, 0x0) 02:31:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) 02:31:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0xc, 0x209e20, 0x8000000001, 0x0, 0xffffffffffffff9c}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:31:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000000c0)=0x40000000000003, 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)=""/80, 0x1c6}, 0x0) 02:31:50 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)) 02:31:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@mcast2, @mcast2, @ipv4={[], [], @multicast2}}) 02:31:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1000) 02:31:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:50 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x80000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r3, &(0x7f0000000480), 0x2000000000000113, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) 02:31:50 executing program 4: 02:31:50 executing program 0: readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x800, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) 02:31:50 executing program 4: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) 02:31:50 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) unshare(0x2000400) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 02:31:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1000}) 02:31:51 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9ef}) 02:31:51 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x0, 0x0) close(r0) 02:31:51 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 02:31:51 executing program 1: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 02:31:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 02:31:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0), 0xc) [ 868.616314] ptrace attach of "/root/syz-executor1"[26645] was attempted by "/root/syz-executor1"[26646] 02:31:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0x2029}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000700)={'eql\x00', @ifru_ivalue=0x8001}) 02:31:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0xc, 0x209e20, 0x8000000001, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:31:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done], 0x0, 0x0, 0x0}) 02:31:51 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:31:51 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000006a40)) 02:31:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x541f, &(0x7f0000000180)) [ 868.912896] binder: 26655:26662 BC_ACQUIRE_DONE node 25 has no pending acquire request [ 868.952345] tty_tiocsserial: 'syz-executor3' is using deprecated serial flags (with no effect): 00000100 [ 868.967876] binder: BINDER_SET_CONTEXT_MGR already set [ 868.969364] binder: 26655:26667 BC_ACQUIRE_DONE u0000000000000000 no match [ 868.973495] binder: 26655:26662 ioctl 40046207 0 returned -16 02:31:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x10000000003) setsockopt$inet6_mreq(r0, 0x29, 0x19, &(0x7f0000000000)={@loopback}, 0x14) 02:31:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:52 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) lstat(0x0, 0x0) 02:31:52 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() creat(0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) bind(0xffffffffffffffff, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0x80) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:31:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:31:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 02:31:52 executing program 5: timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000040)=0x0) memfd_create(&(0x7f0000000080)='\x96vmnet0[&systemtrustedself}eth1ppp1trusted\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2000072e}]) 02:31:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 02:31:52 executing program 5: clone(0x9a02102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:31:53 executing program 2: 02:31:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 02:31:53 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 02:31:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 02:31:53 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 02:31:53 executing program 0: 02:31:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) 02:31:54 executing program 3: 02:31:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0) 02:31:54 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x16001, 0xffffffffffffffff) creat(0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:31:54 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)) 02:31:54 executing program 0: 02:31:54 executing program 3: 02:31:55 executing program 4: 02:31:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') preadv(r0, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/165, 0xa5}], 0x1, 0x0) 02:31:55 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000800)="55c18e8b38add1d45b1e3b79d2e29dbe676b", 0x12}], 0x1, 0x81806) sync_file_range(0xffffffffffffffff, 0x20000000, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) eventfd(0x7f) ioctl$LOOP_CLR_FD(r0, 0x4c01) 02:31:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:31:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) truncate(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x2, [0x4, 0x1]}) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) 02:31:55 executing program 5: 02:31:55 executing program 5: 02:31:55 executing program 2: 02:31:55 executing program 4: [ 872.735199] print_req_error: 56 callbacks suppressed [ 872.735221] print_req_error: I/O error, dev loop0, sector 376 [ 872.746507] buffer_io_error: 54 callbacks suppressed [ 872.746527] Buffer I/O error on dev loop0, logical block 47, lost async page write 02:31:55 executing program 5: 02:31:55 executing program 2: 02:31:55 executing program 0: 02:31:56 executing program 4: 02:31:56 executing program 5: 02:31:56 executing program 1: 02:31:56 executing program 3: 02:31:56 executing program 2: 02:31:56 executing program 0: 02:31:56 executing program 5: 02:31:56 executing program 2: 02:31:56 executing program 3: 02:31:56 executing program 4: 02:31:56 executing program 1: 02:31:56 executing program 2: 02:31:56 executing program 0: 02:31:56 executing program 4: 02:31:56 executing program 3: 02:31:56 executing program 5: 02:31:56 executing program 2: 02:31:56 executing program 0: 02:31:56 executing program 1: 02:31:56 executing program 4: 02:31:56 executing program 5: 02:31:56 executing program 0: 02:31:56 executing program 2: 02:31:56 executing program 3: 02:31:57 executing program 4: 02:31:57 executing program 1: 02:31:57 executing program 2: 02:31:57 executing program 0: 02:31:57 executing program 5: 02:31:57 executing program 3: 02:31:57 executing program 2: 02:31:57 executing program 4: 02:31:57 executing program 1: 02:31:57 executing program 5: 02:31:57 executing program 0: 02:31:57 executing program 3: 02:31:57 executing program 2: 02:31:57 executing program 4: 02:31:57 executing program 5: 02:31:57 executing program 1: 02:31:57 executing program 0: 02:31:57 executing program 3: 02:31:57 executing program 4: 02:31:57 executing program 2: 02:31:57 executing program 5: 02:31:57 executing program 0: 02:31:57 executing program 1: 02:31:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ipddp0\x00', 0x1}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454e2, &(0x7f0000000140)) 02:31:58 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x61b7255e7e5ce426) 02:31:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semget(0x1, 0x0, 0x3c2) 02:31:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) 02:31:58 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001480)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000001380)='oom_score_adj\x00\xaf\x17:&9KN\xd7\xa6\x14j\x88o\a_\x1ca\x9e>\x99nh\r\xf3\xb9\xeb\xd3\xc7\x99J\x9c8\xcen4_\b;X\xff~\xbf\x8c\x9c pe(\xa4\x98\xd5\xfbh\xde\xc5/\r\xbd\xa7\xd8\xc4kw\xa4A\x00C\xfek\b@o\xa2\xd2\t\r\x81\"_\xf9I\x83\x81+\xe3\xbd?\x94LHa\xa3;\x9f.\x91|5u\xec\xc1L\x8br\xad4\xd1\x92\x8a\xf8\xdc00X\f\"\xd5\x8b\xb2\xb0\x91\x95Z\x90\x03\x8d\xd70\xa6\x14\xa4J\xee\xb4\xb3\xe2\xb8\xd3<^\xed\x89+\x1cx\xb6\xfb\xc5\xb8\x1b\xc8\x15\xb0x\xd5&\xabz\xa0:&\xdc\xcf\x9f1)\xdb\xc2\x03\xee\x06\a\xb7\b|\xae\xc7D\xcaU') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000011c0)="c097411e84f02d84d9c1b6e7d6e28a048552158e3fd0ed30a035931fe05adf1ece331e636a949d4f4cabfe6a08aadf478776422f99feaee7da09fa478db0777e71", 0x41}], 0x1}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x0) 02:31:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 02:31:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x20000000) connect(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, 0x80) 02:31:58 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) 02:31:58 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000180)) 02:31:58 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="64869c37be72e4fddd7e0ae16087dcf944e3bd1a2db8fa8e584174f9f041d50a1a610268091339953aa7dc622e785b1102b8c283596db9552b33a9e61cbe8fe953baf566518ceaa2c684bd2f4ff174569d6c7a15acb7d22ac7217832234333f003166344866296544c456ef653eb7e609753240371707ce958005241b6d46a627c322c62b2f2728cbd10f6732a9022effb4cd1687d4d7c321cdcedac10ce759d1a8372c3eff9846b38f66d5747fb959cfea1fd5780d4ff289928e1783d8886bea5b73abbc67e55ed09900b17485b3e4286acf3aa8b77298eca8f113ae03641f5ecc6"], 0x1, 0x0, 0x0) 02:31:58 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x41, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x4) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 02:31:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [], {0x0, 0x1c9c380}}) 02:31:58 executing program 3: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:31:58 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000000)="f2"}) 02:31:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) 02:31:58 executing program 0: r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) setrlimit(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x4, 0x4) semget$private(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lstat(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r4, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x0, 0x0, 0x0, 0x401, 0xb1a, 0x3, 0x0, 0x0, 0x18}}, 0x43) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0), 0x0) pipe2(0x0, 0x0) futimesat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}, {0x0, 0x7530}}) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') getgroups(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) tkill(r0, 0x1000000000016) [ 875.631160] binder: 26876 RLIMIT_NICE not set 02:31:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:31:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000040)=0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x7}]) 02:31:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:31:58 executing program 3: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r0 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 875.833286] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 875.841989] netlink: 'syz-executor2': attribute type 29 has an invalid length. 02:31:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) pipe2(0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) [ 875.876690] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 875.927730] netlink: 'syz-executor2': attribute type 29 has an invalid length. 02:31:59 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x2844, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000250000000300000000000000020000000100000004000000000000000200000000000000000000000000000000"]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(0x0, &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00), 0x0, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) dup(0xffffffffffffffff) rt_sigpending(&(0x7f00000001c0), 0x8) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/30) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) 02:31:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001380)='oom_score_adj\x00\xaf\x17:&9KN\xd7\xa6\x14j\x88o\a_\x1ca\x9e>\x99nh\r\xf3\xb9\xeb\xd3\xc7\x99J\x9c8\xcen4_\b;X\xff~\xbf\x8c\x9c pe(\xa4\x98\xd5\xfbh\xde\xc5/\r\xbd\xa7\xd8\xc4kw\xa4A\x00C\xfek\b@o\xa2\xd2\t\r\x81\"_\xf9I\x83\x81+\xe3\xbd?\x94LHa\xa3;\x9f.\x91|5u\xec\xc1L\x8br\xad4\xd1\x92\x8a\xf8\xdc00X\f\"\xd5\x8b\xb2\xb0\x91\x95Z\x90\x03\x8d\xd70\xa6\x14\xa4J\xee\xb4\xb3\xe2\xb8\xd3<^\xed\x89+\x1cx\xb6\xfb\xc5\xb8\x1b\xc8\x15\xb0x\xd5&\xabz\xa0:&\xdc\xcf\x9f1)\xdb\xc2\x03\xee\x06\a\xb7\b|\xae\xc7D\xcaU') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x4) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x5) 02:31:59 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001380)='oom_score_adj\x00\xaf\x17:&9KN\xd7\xa6\x14j\x88o\a_\x1ca\x9e>\x99nh\r\xf3\xb9\xeb\xd3\xc7\x99J\x9c8\xcen4_\b;X\xff~\xbf\x8c\x9c pe(\xa4\x98\xd5\xfbh\xde\xc5/\r\xbd\xa7\xd8\xc4kw\xa4A\x00C\xfek\b@o\xa2\xd2\t\r\x81\"_\xf9I\x83\x81+\xe3\xbd?\x94LHa\xa3;\x9f.\x91|5u\xec\xc1L\x8br\xad4\xd1\x92\x8a\xf8\xdc00X\f\"\xd5\x8b\xb2\xb0\x91\x95Z\x90\x03\x8d\xd70\xa6\x14\xa4J\xee\xb4\xb3\xe2\xb8\xd3<^\xed\x89+\x1cx\xb6\xfb\xc5\xb8\x1b\xc8\x15\xb0x\xd5&\xabz\xa0:&\xdc\xcf\x9f1)\xdb\xc2\x03\xee\x06\a\xb7\b|\xae\xc7D\xcaU') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}, {0x0}], 0x2}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:31:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) pipe2(0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) [ 876.397964] binder_alloc: binder_alloc_mmap_handler: 26873 20001000-20004000 already mapped failed -16 [ 876.408657] binder: BINDER_SET_CONTEXT_MGR already set [ 876.414217] binder: 26873:26918 ioctl 40046207 0 returned -16 [ 876.424162] binder: 26919 RLIMIT_NICE not set 02:31:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_TSC(0x1a, 0x2) 02:31:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 02:31:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="45b9731283cc604e"], 0x0, 0x8, 0x0, 0x1}, 0x20) 02:31:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @remote}, 0x10) 02:31:59 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) vmsplice(r1, &(0x7f0000001500)=[{&(0x7f0000001540)="7ea5d54be66acc67eb5f3a7ed41a365d91389e396739cc5a29ba526d8ca4498d08024fca829ced28eba8962fcb090ff8f45ad93ff41d2d7d9aebd5d2d3ff80b186d3210abe7f9f7067d97c83cdb6d62bd3fac1ea2a306ca578603312a314d234adc704c3c24971865d42df83255c1bc9d74d6157e131b591d3c96cd33eb3dc92ffe34c574bd9fc633f8a5a13d8c90e1410066644b841bcfa3f269d6eea969cec82044cea6182151d0751a21ca88b6235a1f2d6736283ac144601e55313157a3dd136a55f3e17296a65b1b9c50aabac1ae7ca7b8f7c649eadf52f0df0fb7cc85336a4fda9e870f89ed7d6bd1b003a2f21e37b9c52710583cf663efbd05d2e04deb848066e54bb1b4190e53bdec2715ec69d3236787fc3b76fffbfa02d3dc3b348b07310aed568d568cc97dcea82f0978369b5e53aeb04331a324613e6371d56561aeec3a8993116429284c3f28653b20a399025b5be9fcefccd1299349783ebda47f00128ea8253a78c61ba314f74601b346f431cd86cde89c940dc05bd874b21d495999c6dab67d4e54d444a695769d3fb5dd3933db1b0c6e2e3b674b7809f4a100bcabe41b8abe5da009985798b33a2b248f7b9f512e9cf58eed1c4a9f0c4f218f6c386809c835c311239a24a5533108170f67439577920970bf7fd5ab60c8e9c6e2f0b3a7b5042200479070c3a0951ff013dcc3f647c18472dfe79fd8750ea81a690b74b4b0de3083f17832ab1e4ad3a2c130329175235fcb871833e07dd2b09bf96852ecb56b1f79af9aa5f53a28be33881a64be9fca7624fa8cbc219746256858e7fc62daa76388ecec1c78970df569a4e156a5c494439d72895695a6a30af0edb0b1f8b07b95c08916e4ecde17d13e5296962b7dc7c61dfcf46d59801691d8339c5b8c694c9316070a80fcc7f3f7caed48dba9a2902bfba20174aea09efa71d689212dd2218a05e67832a8eab7244d1f5f4efad5e23460e123d994cbfe06ab70cb903679946123772f620c5ba9b407a4ea4b7362e57259de5785527e833f3cec8424e35bbb8aaf11ecfc668cb1d9502b3e84df6758f69bd73639ea8278b564ceb9e4e54828369e949a7045fbdf1dd5719f23bf75f54e4ed932a98a4eeb6e3e08c511a5281b8e6b57e7b2feb22c4f5854e12e9cd784ce0058af42727a6d830e0e16a164487d47e206aa806f23a57ddf3d8ff854afd10b4345e2cefcc6828275d09a3d0869ed92975b6eb06c8210863e5875bced7fa0778fc36cf31011691f12394ffd2371fa9143ec951376d1b6b1e02bd24caebe0c70f4446a7c665239a2d3f576dbfd0dcbc8683ada66bfcf54280ccd22632e0daef2a3a93fe061568f36246fae0774254ea85003f61b1fa67f44fadd3e525e1f06286ef3d2f7d6be78e30da17bb501f0a13a46ae84fcfbefae391c76106f3fffc9d9c6165d55065b2db285fc1f4a0f8dc508f0242edefd24bd9d44d06e1b13724da723aaef397c852d5e8a0dd998fbf5490661d90de7fccb46f26", 0x431}], 0x1, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000001c0), 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:31:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000000000000290000000200000020cd582837a6dd450000003b000000000000000000000000"], 0x28}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x2ac, 0x0) [ 876.545626] device lo entered promiscuous mode 02:31:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) [ 876.612153] device lo left promiscuous mode 02:31:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES16]], 0x0, 0x8, 0x0, 0x1}, 0x20) 02:31:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086607, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 02:31:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) close(r1) 02:31:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') sendfile(r0, r1, 0x0, 0x200000000011) 02:31:59 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b587022f3c1a70dfb4a7e42f4d969d348234aa28280e62eba139f5c6be7347a4f3d9a4f0bcd5a2e6e6af71f0e645ac7e492b0d04db34e30f6bc29154221969c8f8b9dd6866fae10657449f198ab0013fe5d8b06a74589d95a4e476d6ed123673a513fb8f263fb574933040235da6e520fb8c9fe2849245bab807b859a67ebc7e9aad"], 0x1, 0x0, 0x0) 02:31:59 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') 02:32:00 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="64869c37be72e4fddd7e0ae16087dcf944e3bd1a2db8fa8e584174f9f041d50a1a610268091339953aa7dc622e785b1102b8c283596db9552b33a9e61cbe8fe953baf566518ceaa2c684bd2f4ff174569d6c7a15acb7d22ac7217832234333f003166344866296544c456ef653eb7e609753240371707ce958005241b6d46a627c322c62b2f2728cbd10f6732a9022effb4cd1687d4d7c321cdcedac10ce759d1a8372c3eff9846b38f66d5747fb959cfea1fd5780d4ff289928e1783d8886bea5b73a"], 0x1, 0x0, 0x0) 02:32:00 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086607, &(0x7f0000000000)={0x7ffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 02:32:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$void(r0, 0xc0045878) 02:32:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') pread64(r0, 0x0, 0xfffffcc0, 0x0) 02:32:00 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'vxcan1\x00'}) 02:32:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1000000000001, 0x3, 0x549, 0x24000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0, 0x1}, 0x20) 02:32:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ipddp0\x00', 0x1}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, &(0x7f0000000140)) 02:32:00 executing program 0: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:32:00 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$cgroup_procs(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='hugetlb.2MB.usage_in_bytes\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='hugetlb.2MB\xdeesage\xdfin_bytes\x00') unlink(&(0x7f0000000000)='./file0\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={0x0}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000180), 0x8) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:32:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045568, 0x0) [ 877.347815] sctp: [Deprecated]: syz-executor4 (pid 26985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.347815] Use struct sctp_sack_info instead [ 877.375492] input: syz0 as /devices/virtual/input/input84 [ 877.391194] sctp: [Deprecated]: syz-executor4 (pid 26985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.391194] Use struct sctp_sack_info instead 02:32:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x64}}) 02:32:00 executing program 4: 02:32:00 executing program 4: 02:32:00 executing program 5: 02:32:01 executing program 4: 02:32:01 executing program 5: 02:32:01 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000048, 0x0, 0x0, 0xfffffffffffffffe}, {0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x400000000000083, 0x0) 02:32:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x42, 0x0, &(0x7f0000000100)="e460cdfbef24080000000a9386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242f09880bd320d98a61a90057", 0x0}, 0x28) 02:32:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getpid() socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 02:32:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x0, 0x0, 0x0}) 02:32:01 executing program 5: mknod(&(0x7f0000000140)='./file1\x00', 0x88, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 02:32:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknodat(0xffffffffffffffff, 0x0, 0x9000, 0x0) 02:32:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ipddp0\x00', 0x1}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000140)) 02:32:01 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e5767282"]]], 0x8}, 0x0) 02:32:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x23d) close(r0) sendmsg(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r1) 02:32:02 executing program 4: socket$inet6(0xa, 0x0, 0x106) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x2844, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025000000030000000000000002000000010000000400000000000000020000000000000000000000000000000000000000000000000000000000000000"]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a", 0x76, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) read(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) rt_sigpending(&(0x7f00000001c0), 0x8) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/30) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 02:32:02 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) 02:32:02 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208"]]], 0x8}, 0x0) 02:32:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) 02:32:02 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed"], 0x1, 0x0, 0x0) 02:32:02 executing program 2: r0 = open(&(0x7f0000000140)='./file1\x00', 0x400043, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) close(r0) prctl$PR_GET_TIMERSLACK(0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f00)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 02:32:02 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:32:02 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1cea"], 0x1, 0x0, 0x0) 02:32:02 executing program 3: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 02:32:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) 02:32:02 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753240371707ce958005241b6d46a627c320000000000000000392f39d9b3980e8e07ddb3254ea10cb495226c3ab89d58ec49"], 0x1, 0x0, 0x0) 02:32:02 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7"]]], 0x8}, 0x0) 02:32:03 executing program 4: rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) semget$private(0x0, 0x4, 0x0) getuid() lstat(0x0, 0x0) semget$private(0x0, 0x0, 0x464) timer_create(0x0, 0x0, &(0x7f0000044000)) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x400040, 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) 02:32:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x19, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000d69d881f0f3e7143"], 0x0, 0x0, 0x0}) 02:32:03 executing program 2: r0 = open(&(0x7f0000000140)='.\x00', 0x143042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffe5b) r1 = gettid() ptrace$peekuser(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xffffffffffffff41) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) writev(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x1000000000016) 02:32:03 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000008000000000000000000b5bbb7a5f65ba1969e404f572aa850585d46d4b0b5054b3ba61eb3a47654eb67aef456a00f9cbe0f2d334a03240705ab36e695cd2de41fb13516c6b587022f3c1a70dfb4a7e42f4d969d348234aa28280e62eba139f5c6be7347a4f3d9a4f0bcd5a2e6e6af71f0e645ac7e492b0d04db34e30f6bc29154221969c8f8b9dd6866fae10657449f198ab0013fe5d8b06a74589d95a4e476d6ed123673a513fb8f"], 0x1, 0x0, 0x0) 02:32:03 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001380)='oom_score_adj\x00\xaf\x17:&9KN\xd7\xa6\x14j\x88o\a_\x1ca\x9e>\x99nh\r\xf3\xb9\xeb\xd3\xc7\x99J\x9c8\xcen4_\b;X\xff~\xbf\x8c\x9c pe(\xa4\x98\xd5\xfbh\xde\xc5/\r\xbd\xa7\xd8\xc4kw\xa4A\x00C\xfek\b@o\xa2\xd2\t\r\x81\"_\xf9I\x83\x81+\xe3\xbd?\x94LHa\xa3;\x9f.\x91|5u\xec\xc1L\x8br\xad4\xd1\x92\x8a\xf8\xdc00X\f\"\xd5\x8b\xb2\xb0\x91\x95Z\x90\x03\x8d\xd70\xa6\x14\xa4J\xee\xb4\xb3\xe2\xb8\xd3<^\xed\x89+\x1cx\xb6\xfb\xc5\xb8\x1b\xc8\x15\xb0x\xd5&\xabz\xa0:&\xdc\xcf\x9f1)\xdb\xc2\x03\xee\x06\a\xb7\b|\xae\xc7D\xcaU') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000012c0)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:32:03 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001380)='oom_score_adj\x00\xaf\x17:&9KN\xd7\xa6\x14j\x88o\a_\x1ca\x9e>\x99nh\r\xf3\xb9\xeb\xd3\xc7\x99J\x9c8\xcen4_\b;X\xff~\xbf\x8c\x9c pe(\xa4\x98\xd5\xfbh\xde\xc5/\r\xbd\xa7\xd8\xc4kw\xa4A\x00C\xfek\b@o\xa2\xd2\t\r\x81\"_\xf9I\x83\x81+\xe3\xbd?\x94LHa\xa3;\x9f.\x91|5u\xec\xc1L\x8br\xad4\xd1\x92\x8a\xf8\xdc00X\f\"\xd5\x8b\xb2\xb0\x91\x95Z\x90\x03\x8d\xd70\xa6\x14\xa4J\xee\xb4\xb3\xe2\xb8\xd3<^\xed\x89+\x1cx\xb6\xfb\xc5\xb8\x1b\xc8\x15\xb0x\xd5&\xabz\xa0:&\xdc\xcf\x9f1)\xdb\xc2\x03\xee\x06\a\xb7\b|\xae\xc7D\xcaU') syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 880.514886] binder: 27077:27079 transaction failed 29189/-22, size 0-0 line 2834 [ 880.583081] binder_alloc: binder_alloc_mmap_handler: 27077 20001000-20004000 already mapped failed -16 02:32:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x3fffe83, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f0000000380)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) 02:32:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_getoverrun(0x0) [ 880.628128] binder: undelivered TRANSACTION_ERROR: 29189 02:32:03 executing program 1: mknod(&(0x7f0000000140)='./file1\x00', 0x88, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) write$P9_RRENAME(r2, 0x0, 0x0) 02:32:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_ABSBIT(r0, 0xc018620b, 0x0) 02:32:03 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="06", 0x1}, {0x0}, {0x0}], 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:32:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 880.887384] binder: 27104:27108 ioctl c018620b 0 returned -14 02:32:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x80000000000e, 0x4, 0x2000000000004, 0x2000010070}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) 02:32:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:32:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') sendfile(r0, r1, 0x0, 0x200000000011) [ 880.934398] binder: 27104:27116 ioctl c018620b 0 returned -14 02:32:04 executing program 4: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) 02:32:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000040)) 02:32:04 executing program 5: [ 881.557189] IPVS: ftp: loaded support on port[0] = 21 [ 882.172676] protocol 88fb is buggy, dev hsr_slave_0 [ 882.178472] protocol 88fb is buggy, dev hsr_slave_1 [ 882.184592] protocol 88fb is buggy, dev hsr_slave_0 [ 882.190347] protocol 88fb is buggy, dev hsr_slave_1 [ 882.252315] protocol 88fb is buggy, dev hsr_slave_0 [ 882.257997] protocol 88fb is buggy, dev hsr_slave_1 [ 882.264635] IPVS: ftp: loaded support on port[0] = 21 02:32:05 executing program 2: 02:32:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:32:05 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, 0x0, 0x0) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e"], 0x1, 0x0, 0x0) 02:32:05 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x26, 0x37, 0x1, {0x2, 0x20, 0x2, r1, 0x8, '#selinux'}}, 0x26) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001540)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) 02:32:05 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x7, 0x100082) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000800)="55c18e8b38add1d45b1e", 0xa}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) eventfd(0x7f) ioctl$LOOP_CLR_FD(r0, 0x4c01) getegid() 02:32:05 executing program 4: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) 02:32:05 executing program 0: 02:32:05 executing program 2: 02:32:05 executing program 5: [ 882.656172] print_req_error: I/O error, dev loop7, sector 256 [ 882.662395] Buffer I/O error on dev loop7, logical block 32, lost async page write 02:32:05 executing program 3: 02:32:05 executing program 0: [ 882.854570] IPVS: ftp: loaded support on port[0] = 21 02:32:06 executing program 2: 02:32:06 executing program 3: 02:32:06 executing program 0: 02:32:06 executing program 1: 02:32:06 executing program 5: 02:32:06 executing program 4: 02:32:06 executing program 2: 02:32:06 executing program 0: 02:32:06 executing program 3: 02:32:06 executing program 1: 02:32:06 executing program 5: 02:32:06 executing program 2: 02:32:06 executing program 4: 02:32:06 executing program 3: 02:32:06 executing program 0: 02:32:06 executing program 1: 02:32:06 executing program 2: 02:32:06 executing program 5: 02:32:06 executing program 0: 02:32:06 executing program 1: 02:32:06 executing program 3: 02:32:06 executing program 4: 02:32:07 executing program 2: 02:32:07 executing program 5: 02:32:07 executing program 0: 02:32:07 executing program 1: 02:32:07 executing program 3: 02:32:07 executing program 4: 02:32:07 executing program 2: 02:32:07 executing program 0: 02:32:07 executing program 4: 02:32:07 executing program 3: 02:32:07 executing program 1: 02:32:07 executing program 5: 02:32:07 executing program 2: 02:32:07 executing program 0: 02:32:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000040)) 02:32:07 executing program 3: 02:32:07 executing program 4: 02:32:07 executing program 5: 02:32:07 executing program 0: 02:32:07 executing program 1: 02:32:07 executing program 2: 02:32:07 executing program 3: 02:32:08 executing program 4: 02:32:08 executing program 0: 02:32:08 executing program 1: 02:32:08 executing program 5: 02:32:08 executing program 0: 02:32:08 executing program 2: 02:32:08 executing program 1: 02:32:08 executing program 3: 02:32:08 executing program 4: 02:32:08 executing program 5: 02:32:08 executing program 0: 02:32:08 executing program 2: 02:32:08 executing program 1: 02:32:08 executing program 3: 02:32:08 executing program 4: 02:32:08 executing program 0: 02:32:08 executing program 1: 02:32:08 executing program 2: 02:32:08 executing program 5: 02:32:08 executing program 3: 02:32:08 executing program 4: 02:32:08 executing program 0: 02:32:08 executing program 1: 02:32:09 executing program 2: 02:32:09 executing program 5: 02:32:09 executing program 3: 02:32:09 executing program 0: 02:32:09 executing program 1: 02:32:09 executing program 4: 02:32:09 executing program 5: 02:32:09 executing program 0: 02:32:09 executing program 1: 02:32:09 executing program 2: 02:32:09 executing program 4: 02:32:09 executing program 3: 02:32:09 executing program 2: 02:32:09 executing program 4: 02:32:09 executing program 5: 02:32:09 executing program 0: 02:32:09 executing program 1: 02:32:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') readv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000000440)=""/242, 0xf2}], 0x3) 02:32:09 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x400806e, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) 02:32:09 executing program 3: 02:32:09 executing program 0: 02:32:09 executing program 1: 02:32:09 executing program 5: 02:32:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00') read(r0, 0x0, 0x0) 02:32:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 02:32:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') pread64(r0, 0x0, 0xfffffcc0, 0x1fd) 02:32:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') sendfile(r0, r0, 0x0, 0x7ffffffb) 02:32:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) 02:32:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f0000000100)=""/232, 0xe8}], 0x2, 0x0) 02:32:10 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfff7fffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x7}, 0xff7f) 02:32:10 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 02:32:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') close(r0) 02:32:10 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') 02:32:10 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') 02:32:10 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') close(r0) 02:32:10 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x400806e, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:32:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x1b7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f0000678f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x33f7) 02:32:10 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') 02:32:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') read(r0, 0x0, 0x0) 02:32:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00') pread64(r0, 0x0, 0x0, 0x0) 02:32:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') pread64(r0, 0x0, 0x2e7, 0x0) 02:32:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f0000000100)=""/232, 0xe8}], 0x100000000000025e, 0x0) 02:32:10 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46"], 0x4) 02:32:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') sendfile(r0, r0, 0x0, 0x7ffffffb) 02:32:10 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='net/i\xf0\x12\xccHX\x17WI)S\xa8\x89\rx\x81\xc1*H\x02\xe6\xaa\x0f8\xff\xbc\xfb\xd8\x17/\x84#\xb2\xa7\x14\xdc\xdc\xbf\xa4I\xb4\xf0\x9d\x89p}\xcf\xcb\xcd\xadk:\b\xb2\xeb\x1f|\x002\xdez\xce\xae{\x9a\xa6\xb7q\xeb\xa0W\xb9\xd7\xf1\xf4.L\x04\xaaB\xd4Y\xd2\x8e\r\xbc\x8eg\x18C\xb5\x05\xc6\x02\x1e\x15\xef\xa5\x82\xe041X8\xa7 |_X\x8d\xa6\x13\x99\xa2\xc4*\x9f\"\x88P') 02:32:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 02:32:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') pread64(r0, 0x0, 0xfffffcc0, 0x1fd) 02:32:10 executing program 0: syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 02:32:11 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x1) 02:32:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') pread64(r0, 0x0, 0x0, 0x0) 02:32:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 02:32:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r2}, {r1, 0x1301}], 0x2, 0x0, 0x0, 0x0) 02:32:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') ftruncate(r0, 0x4) 02:32:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r0, r0) 02:32:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') close(r1) 02:32:11 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000017c0)='ns/mnt\x00') 02:32:11 executing program 2: io_setup(0x6, &(0x7f0000000000)=0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 02:32:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') pread64(r0, &(0x7f0000000100)=""/195, 0xc3, 0x0) 02:32:11 executing program 4: syz_genetlink_get_family_id$nbd(0x0) 02:32:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x400806e, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)={0x5, 0x0, 0x5, 0x0, 0x40001}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x98) 02:32:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') read(r0, &(0x7f0000000040)=""/65, 0x41) 02:32:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') sendfile(r0, r0, 0x0, 0x7ffffffb) [ 888.412321] protocol 88fb is buggy, dev hsr_slave_0 [ 888.417951] protocol 88fb is buggy, dev hsr_slave_1 [ 888.423880] protocol 88fb is buggy, dev hsr_slave_0 [ 888.429513] protocol 88fb is buggy, dev hsr_slave_1 02:32:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 02:32:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2000000088) sendto$inet(r0, &(0x7f0000000100)="99423f8850890cda", 0x8, 0x0, 0x0, 0x0) 02:32:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_adj\x00') pread64(r0, 0x0, 0x0, 0x0) 02:32:11 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 02:32:11 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') pread64(r0, 0x0, 0xfffffe5e, 0x0) 02:32:11 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pread64(r0, 0x0, 0x243, 0x0) 02:32:11 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') 02:32:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') pread64(r0, &(0x7f0000000100)=""/195, 0xc3, 0x0) 02:32:11 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') pread64(r0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 02:32:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='gfs2\x00', 0x40000, 0x0) 02:32:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) getegid() 02:32:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 02:32:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1, 0x0) 02:32:12 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) 02:32:12 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x0) 02:32:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r1, &(0x7f00000022c0)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x0) 02:32:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0) 02:32:12 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 02:32:12 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0xfffffffffffffffc, 0x2000000225, 0x48}) 02:32:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:32:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:32:12 executing program 0: 02:32:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 02:32:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002380)=""/194, 0xc2}], 0x1, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/149, 0x95}], 0x1, 0x0) 02:32:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0xc000, 0x0) 02:32:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0, 0x2}, 0x20) 02:32:12 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lookup_dcookie(0x0, 0x0, 0x0) 02:32:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000940)='statm\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002380)=""/194, 0xc2}], 0x1, 0x0) 02:32:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, 0x0) 02:32:13 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:32:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00', 0x4b}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:32:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:32:13 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) getsockname(r1, &(0x7f0000000500)=@hci, &(0x7f0000000440)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000340)={0x6b}, 0xfffffffffffffe09) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) write$cgroup_type(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) 02:32:13 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) getsockname(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) [ 890.467432] input: syz0 as /devices/virtual/input/input90 [ 890.477253] input: syz0 as /devices/virtual/input/input91 02:32:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0) [ 890.555599] input: syz0 as /devices/virtual/input/input93 02:32:13 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/20, 0x14}, 0x120) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/152, 0x98}], 0x1) 02:32:13 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 890.871415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.878385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.885398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.892303] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.899751] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.906723] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.913678] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.920501] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.927434] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.934320] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.941137] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.948144] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.955060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.962003] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 02:32:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x0) [ 890.968810] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.975759] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.982633] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.989444] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 890.996381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 891.003302] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 02:32:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0) [ 891.060106] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 891.138915] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.146139] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.153060] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.159881] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.166757] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.173629] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.180436] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.187313] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.194172] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.200991] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.207943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.214822] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.221767] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.228579] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.235506] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.242401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.249199] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.256121] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.263007] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 891.269810] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 02:32:14 executing program 1: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:32:14 executing program 5: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) timer_create(0x6, 0x0, &(0x7f0000000100)) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 891.510576] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 02:32:14 executing program 2: socket$inet6(0xa, 0x6, 0x106) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x1e06d73802273095) fcntl$setflags(r2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) read(0xffffffffffffffff, &(0x7f00000000c0)=""/44, 0x2c) r4 = dup(0xffffffffffffffff) rt_sigpending(&(0x7f00000001c0), 0x8) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/30) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x1, 0x3, 0x8000, 0x355}]}) ftruncate(0xffffffffffffffff, 0xffffffff00000001) getsockname$packet(r4, 0x0, &(0x7f0000000040)) 02:32:14 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 02:32:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x18000100) 02:32:14 executing program 0: r0 = memfd_create(&(0x7f0000000080)='securityem0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x3af) execveat(r0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 02:32:14 executing program 5: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:32:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/19) 02:32:14 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) poll(&(0x7f0000000380)=[{r2}], 0x1, 0x0) 02:32:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 02:32:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) 02:32:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:32:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getgroups(0x0, 0x0) 02:32:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x9, 0x80, 0x101, 0x0, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x18) 02:32:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') pread64(r0, 0x0, 0xfffffe5e, 0x0) 02:32:15 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x75a, 0x8180) 02:32:15 executing program 1: socket$inet6(0xa, 0x0, 0x106) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000250000000300000000000000020000000100000004000000000000000200000000000000000000000000000000000000000000000000000000000000000000008b000000030000000000000000000000000000000180000000"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x1e06d73802273095) fcntl$setflags(r2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) read(0xffffffffffffffff, &(0x7f00000000c0)=""/44, 0x2c) dup(0xffffffffffffffff) rt_sigpending(&(0x7f00000001c0), 0x8) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/30) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x1, 0x0, 0x0, 0x355}]}) ftruncate(0xffffffffffffffff, 0xffffffff00000001) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 02:32:15 executing program 5: r0 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffe43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 02:32:15 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/249) 02:32:15 executing program 4: r0 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\x16\x15U\xa3\x00iK\xad\xe5P(k\xd1\x91\xb9\xdb)\xc6s~-.!\xbf.q\x92\xe8T\xdcg\xe8\x84n\x8e\xfa\xce\xc3\x1ba;\x04\x88nP\x1d\x98A\xbe\x8a\xc10\xb8\xfa_7\xd2\xc8\x91l\x9a\xac\xfe\xb3H\xf0\xeb~\xa1\xa5\x9cx\xe5\x05\x93\xc2\f\xcb\xaf#5\xe8\xa40\x97|\xfd\f\\\xaamfN\x91\x15\xc5LX\x8e\xeb\xe2\x90\xf7O\'\xb4\xf3\xd2\x92\x9c\xaf\t\xe3\x92\xfa\xe5c\xb86\x1b]\x1f\xa4\xe4q\xe6\xa3z\xee}[\x7fvbF\xf3:\xf9i\x8b\xc0U\x9c\xc3\xc0\xd7\xb9\xdf\xa6\x9c\xbb\xd00\xd9\xc0\x00Q\xf6\au&D\xb5\xdcAH\xdf&\x97\v\xdc\xd0(\xc0\x0f\xe5\xbe!\'F\x8e', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffe43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 02:32:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') 02:32:15 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f0000000000)) 02:32:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_init1(0x80003) 02:32:16 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) 02:32:16 executing program 3: 02:32:16 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)) 02:32:16 executing program 4: request_key(&(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000440)={'syz'}, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000380)=[0xee00, 0xee01]) setgid(r0) 02:32:16 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) 02:32:16 executing program 3: socket$inet6(0xa, 0x5, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 893.387782] input: syz1 as /devices/virtual/input/input99 02:32:16 executing program 5: 02:32:16 executing program 0: 02:32:16 executing program 4: 02:32:16 executing program 1: 02:32:16 executing program 2: 02:32:16 executing program 3: socket$inet6(0xa, 0x5, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 893.815495] input: syz1 as /devices/virtual/input/input101 02:32:16 executing program 4: 02:32:17 executing program 0: 02:32:17 executing program 1: 02:32:17 executing program 5: 02:32:17 executing program 2: 02:32:17 executing program 0: 02:32:17 executing program 1: 02:32:17 executing program 3: 02:32:17 executing program 4: 02:32:17 executing program 2: 02:32:17 executing program 5: 02:32:17 executing program 0: 02:32:17 executing program 1: 02:32:17 executing program 4: 02:32:17 executing program 3: 02:32:17 executing program 4: 02:32:17 executing program 2: 02:32:17 executing program 5: 02:32:17 executing program 0: 02:32:17 executing program 1: 02:32:17 executing program 3: 02:32:17 executing program 4: 02:32:17 executing program 2: 02:32:17 executing program 0: 02:32:17 executing program 1: 02:32:17 executing program 5: 02:32:18 executing program 2: 02:32:18 executing program 4: 02:32:18 executing program 3: 02:32:18 executing program 1: 02:32:18 executing program 0: 02:32:18 executing program 2: 02:32:18 executing program 4: 02:32:18 executing program 5: 02:32:18 executing program 1: 02:32:18 executing program 0: 02:32:18 executing program 3: 02:32:18 executing program 4: 02:32:18 executing program 2: 02:32:18 executing program 0: 02:32:18 executing program 1: 02:32:18 executing program 5: 02:32:18 executing program 3: 02:32:18 executing program 4: 02:32:18 executing program 2: 02:32:18 executing program 5: 02:32:18 executing program 0: 02:32:18 executing program 1: 02:32:18 executing program 2: 02:32:18 executing program 3: 02:32:18 executing program 4: 02:32:18 executing program 2: 02:32:19 executing program 0: 02:32:19 executing program 5: 02:32:19 executing program 1: 02:32:19 executing program 3: 02:32:19 executing program 5: 02:32:19 executing program 0: 02:32:19 executing program 2: 02:32:19 executing program 4: 02:32:19 executing program 1: 02:32:19 executing program 5: 02:32:19 executing program 3: 02:32:19 executing program 0: 02:32:19 executing program 4: 02:32:19 executing program 2: 02:32:19 executing program 1: 02:32:19 executing program 5: 02:32:19 executing program 0: 02:32:19 executing program 3: 02:32:19 executing program 1: 02:32:19 executing program 2: 02:32:19 executing program 4: 02:32:19 executing program 5: 02:32:19 executing program 0: 02:32:19 executing program 4: 02:32:19 executing program 1: 02:32:20 executing program 3: 02:32:20 executing program 2: 02:32:20 executing program 4: 02:32:20 executing program 5: 02:32:20 executing program 0: 02:32:20 executing program 1: 02:32:20 executing program 4: 02:32:20 executing program 2: 02:32:20 executing program 3: 02:32:20 executing program 5: 02:32:20 executing program 4: 02:32:20 executing program 1: 02:32:20 executing program 0: 02:32:20 executing program 2: 02:32:20 executing program 3: 02:32:20 executing program 5: 02:32:20 executing program 0: 02:32:20 executing program 1: 02:32:20 executing program 4: 02:32:20 executing program 2: 02:32:20 executing program 3: 02:32:20 executing program 5: 02:32:20 executing program 4: 02:32:20 executing program 0: 02:32:20 executing program 1: 02:32:21 executing program 4: 02:32:21 executing program 0: 02:32:21 executing program 3: 02:32:21 executing program 5: 02:32:21 executing program 2: 02:32:21 executing program 1: 02:32:21 executing program 1: 02:32:21 executing program 0: 02:32:21 executing program 4: 02:32:21 executing program 3: 02:32:21 executing program 5: 02:32:21 executing program 2: 02:32:21 executing program 1: 02:32:21 executing program 4: 02:32:21 executing program 0: 02:32:21 executing program 5: 02:32:21 executing program 3: 02:32:21 executing program 2: 02:32:21 executing program 1: 02:32:21 executing program 5: 02:32:21 executing program 0: 02:32:21 executing program 4: 02:32:21 executing program 1: 02:32:21 executing program 3: 02:32:21 executing program 0: 02:32:21 executing program 4: 02:32:21 executing program 2: 02:32:22 executing program 5: 02:32:22 executing program 3: 02:32:22 executing program 1: 02:32:22 executing program 0: 02:32:22 executing program 2: 02:32:22 executing program 4: 02:32:22 executing program 5: 02:32:22 executing program 3: 02:32:22 executing program 1: 02:32:22 executing program 0: 02:32:22 executing program 4: 02:32:22 executing program 5: 02:32:22 executing program 2: 02:32:22 executing program 3: 02:32:22 executing program 1: 02:32:22 executing program 0: 02:32:22 executing program 4: 02:32:22 executing program 5: 02:32:22 executing program 3: 02:32:22 executing program 2: 02:32:22 executing program 1: 02:32:22 executing program 3: 02:32:22 executing program 0: creat(&(0x7f0000000040)='./file1\x00', 0x1) syz_execute_func(&(0x7f0000000000)="ba66440f50f564ff0941c335e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dcc4bd31919") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup2(r2, r0) execve(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0) write$P9_RREAD(r3, &(0x7f0000000280)={0xb}, 0xb) 02:32:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) syz_execute_func(&(0x7f0000000140)="3666440f50f564ff0941c3c4e2c9975842d9f766420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:32:22 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000580)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000500)='./file1/file0\x00', 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000000)={0x7}, 0x7) 02:32:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 02:32:23 executing program 2: 02:32:23 executing program 3: 02:32:23 executing program 2: syz_execute_func(&(0x7f0000000040)="ba42440fe4f564ff0941c342c4c27d794e0066420fe27fe3e30f11103e66410f3a0ff4038c4219") clone(0x200, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000000300)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0x5e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) 02:32:23 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000000340)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x83e, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) 02:32:23 executing program 3: syz_execute_func(&(0x7f0000000040)="ba42440fe4f564ff0941c342c4c27d794e0066420fe27fe3e30f11103e66410f3a0ff4038c4219") clone(0x200, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mknod(&(0x7f0000000300)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0x5e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) 02:32:23 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mknod(&(0x7f0000000380)='./file0\x00', 0x0, 0x3) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0x5e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) 02:32:23 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0003000000000000c910000000006b81a11a59000000000000ffff0107080200e5ffffffffffff00"], 0x1) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=""/128, 0x80}, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x68802, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000540)={r1, r2+30000000}, &(0x7f0000000580)) write(r0, &(0x7f0000000440), 0x0) 02:32:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) write$P9_RLERRORu(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 02:32:24 executing program 1: 02:32:24 executing program 1: 02:32:24 executing program 2: creat(&(0x7f0000000040)='./file1\x00', 0x1) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup2(r2, r0) execve(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0) write$P9_RREAD(r3, &(0x7f0000000280)={0xb}, 0xb) 02:32:24 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x6a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0x296) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) 02:32:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842d9f766420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) write$P9_RWSTAT(r1, 0x0, 0x0) 02:32:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000280)="3666440f50f564ff0941c343f5c4c27d794e0066420fe2e3143e0f11101042019dccd3196466430f3815f7") read$eventfd(r0, &(0x7f0000000000), 0x8) 02:32:24 executing program 0: 02:32:24 executing program 1: 02:32:24 executing program 2: 02:32:25 executing program 1: 02:32:25 executing program 0: 02:32:25 executing program 2: 02:32:25 executing program 3: 02:32:25 executing program 5: 02:32:25 executing program 4: 02:32:25 executing program 2: 02:32:25 executing program 0: 02:32:25 executing program 1: 02:32:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) bind$inet6(r0, &(0x7f0000000080), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:32:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setattr(r2, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000004c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:32:25 executing program 3: creat(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb=':E,5\nnu%lb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 02:32:26 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sendfile(r1, r0, 0x0, 0x2000006) readv(r1, &(0x7f0000000440)=[{&(0x7f00000008c0)=""/88, 0x58}], 0x1) [ 903.140123] libceph: parse_ips bad ip ':E,5 [ 903.140123] nu%lb' [ 904.131344] IPVS: ftp: loaded support on port[0] = 21 [ 904.265416] chnl_net:caif_netlink_parms(): no params data found [ 904.328096] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.334715] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.343190] device bridge_slave_0 entered promiscuous mode [ 904.352419] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.358945] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.367422] device bridge_slave_1 entered promiscuous mode [ 904.390677] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 904.400794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 904.422527] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 904.430545] team0: Port device team_slave_0 added [ 904.436976] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 904.445241] team0: Port device team_slave_1 added [ 904.450909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 904.459326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 904.515562] device hsr_slave_0 entered promiscuous mode [ 904.552383] device hsr_slave_1 entered promiscuous mode [ 904.625024] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 904.633996] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 904.653748] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.660327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.667509] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.674141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.735264] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 904.741359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.752648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 904.767923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 904.775822] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.783688] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.792010] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 904.805125] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 904.811203] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.823687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 904.832065] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.838560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.854557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 904.862778] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.869295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.897052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 904.909096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 904.934554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 904.943876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 904.952290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 904.966911] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 904.973146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 904.991405] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 905.006516] 8021q: adding VLAN 0 to HW filter on device batadv0 02:32:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000740)=@v2={0x5, 0x1, 0x8, 0x81, 0xfff, "0c869ed86c93aa1cd5dbe0c560305e17e9e33e9bedf1b925de03224785a1d94f76e9052a70dae0dd8c76f674067a833bb6b14834c8f3d9c8ebe10c7ba9ee87397098c5d4581dc6fa9ace564df65dc3bece7f790feb6c45e76d012158fab468833781b605124fe5ff85df4b5b14fc1063a9736e286bae1c405b454123dea917147f8873867a36010e9db90db7c02ecf9a99245de14e1ed9ea85152d274c46696b60a23a32a9573cfcc181b371e17ce3c2d70d09f1bcc2556f4641b8e5311be23ff0c957464a63f54f457e2515537db460ad3af61f3e71364dcaa0cd043327031ac9654b7bcdf8e752c3dfcab26b655675ea5e00224829a005236f21f76a051358010b49605b809cea895eb2375a97a20c76f5fb8503a1b2db08374cd20616ad82306ed0f73dfe65d8172afefd88498c889e411dc4df2a506381fd10935d7602382b0459efa392e1b71b4575e6c89bb4bef9c3a37e40bd09a71fafbe4e97e82a0cb1b4c2bbd0b217454cfd69e591d7230ae91e81eddeb04b1066a62981a9c2f15f85ffeef5df8fffac708cd2c695afbf4bba0b0f09b369fa111d25d493bfb175f8da438515eafacdeba619a8623bae65a669082265bca7828a37653c165dbfd979f9fd1ffb65a392299134acc2ec0733aeb51ff2dfd9f5b220144e39383634b66af0f098e8162319aea43047f77dbca065fc7f1bd4ba6f8901008adc386da90177e1ed0f2662032d1a8dcb98e040f2cefab3907af4b386a1c9276a9e0b10233ff23636434b00989e7d371aa68a8d09e1af48c59d2dd41026cf98ab35cfa327e835c995c91e1ccc8c295561c00d514ead80fabd5f0b28657b0cd9826f42105030c044979c0f11ebdade82ff741e7ef5ff14f0ef50afad89d7f6486e45ef876b279af3ee49f2c8be8ed7875c1a2ffb2dfda711ce34b6e8b857eb8d7c087cb51de930e37fdf68277a6394df7372cbf1827043775352708130e13bedc772a217a3329c281f0e35b5a2a6086a82c150126e2282ec68258ba982e3ed6fd3588a6b031bb23729a66c16da0450da2106fa6705ce4f8e4dd1e607f00e9fc3d157943de727010837b1c42cf66b4b83b3fcbdb4516cd885eadecce9b872745b45b0c9fb2332bfc40ad7c557a9d6e7474d7ff288c584ec2c2d5581bc36e5681e051fd9b29123ab1493416b26bb62e9af625ea034fa9cd394cab81147bcd1af9877582b1365a7ae8b441ebb8cc550046a8cbac9d9b25ca6b5401c9fb1c4c7e216ced27a352c772f82c1e68eae1261ef20466ccd3814f3c6db10b3291c18210fd497f078a6fe6629ab6abdd749c97073310363d11869dbe3f387fe2026302183449dc10ab31b8f21f8390f222299752e3856ad047a3bae1cbba90cece600b20dae94036b1303cda882da5d051aa82e5479419aee3a2b4ed6be473259d610ec2175afb5c5abdcfda9921363bce1d5dbb4b96c349343a28e91092a9c6e6cae80a2b1bfc9597c8dca65d6a5e544707be104a908079cd12fd1e7deb6eab0bb0acaeb368186b6263f2f74ddc5166ba5d6e48a9866fc9d9552f6202a2f67fbdab0bd63748b9bcc4a36717ec0a4f01a1474d75e7a3158991ee15f5a3f0539d2422e8e786f0997caed19a592dcf98b1d385042fefdbc59608317dbc0f51feebb9ed4e2fa9b551610f42049bd5ca42fcff5a842777095a542c7537e61e70b76e63dc4d549f5a0457421482a207a9096100b000fa483b8bc40ffb22f7f1149e8bcacfa8fbd9d7d45346fa2d5a20b059cd4aa74d73a69c9c4ff9811aade76b69145bd7294bcd182bd4f0b235b32559eaf5ad439a5cb95e87aa7471b2075fde583e5ecc210c87c2c0f4c36763fb6b0185f511012b6ea25720fdcc79f10b7cdfb308fc6536851d7019273a0ede109118423018bbf5ba40c3c7bedbbf58fbdc2afab1d5cb376a85cf0fa3984bd53ff57dcf493f146fc401771494f1db60ef7699e70dad287e833a42afa54bc50a1236516cb907b1815d6c5effb20907105d1c0317a48531eb861031c960cf1a7c2f053378a147601be925df9f64b0a91f3de8714b6768cc758daefc9c1b9a76e0209a505c702ab8dc940d5b0691e267defe060972f48d5d2e326735533f16c77e2b240f8d796cf0eeaaf03094b7d486269b0b3be2eb9edcc84acd259426afeff3a5649338dda0e2de5c5bf3453d5b8e7074eb954bed68bf5bde96957f22ec2d73d18af0c07a67e61f1491f29308988e592fb60bd044552c31f657e28dd22df954793922a004b37f4a8e29271efcd9eefc3a05044def91177e0d053c20127cab99f22d1256b8cf237682f1491833edc124e5d29f44b614272e9adffe1cbc6dde81ce49c4fe2e055b48c913bacc7cc838e387fda50c6869b45034b584ba5225fbfe5e397d69d201e38a851c7ffb92c5ee8c8ed20bb3265c43465331df8c540817c0fb382782fcbeb6325d20c4762df9a07c9410fded709303a0538496d7b5637cb10cbd9ecb4689817d1e0e3ccb6b7094737d7d22eb3766bb1098505191a3f9e9220c555e28e24622f44f442779b09be7d602161bf1acb9fe477db6504a9741ee30781df5065cad79a9940a22597f2e0f2564f6297c8b4a10e1e8ec7645e9f2c5d879d00fc92aeb929fd892e432876338a74bd492370bebdccb1796450c0fbf0fa22193e009eb233b74375b9ce694843eb2f9c07550a584f0300e45b23ddbab41cc9ff7589465c74f95c0e1f0fbd9366ee9fe9e0ccdea934be056393ce1f68b965974904fd515245f6ea1087d4396117ef7da89242f4f9d394e00541c2393eeab2e71fca144f24abc0757ca46748e2f790737952f3520252d396c9fd079b1e2f3b2a2f58da6f52224610cb27448e0bc83d9dd0fd543408865179d4fd79d8a85ecb378b0e5c432a772944677efc6424d19171a8da0b581aebba0a33be03304377c087052728c2c55868244d8bce23cff20dc367190f993a9dbac00d96d517036ac2a49747392e98c28bbe229712e2a702950e3a5c2eb57f7b3dd6cfe371ad26756ee0bdf1d7fe7feca39170aeb82579e2f748db6dfdd629a8f0a1accdacfc2c1f8104dea80ffc88b9404c1f0e8bad659f461729bc7acf981f945edb36fd329d28ad813214e118169edca098d5839bbe577d05e78ee3f763c926c73ed388fb031bb6114fcdfecfe6313bc4f597c50016513810111415759196946d755e6f2d26ca13750fc835d3a8b6de65d276c5d31fad68bb057f1e610b9826916916cc66eecbae2034a79b7453402fa240d4b6a5379126b9574641c2075edd5d625f433de6a0e145f32109d6437d108d167b21e2cb4a410296e4fe32f2005ea16eba06255b9b03d99c53cd7731526e9aa3da4c8c204ba19a77c5faaf9a4acc10c43cb252803a235a631cea5317afbf3218477f7a6ca4d590427d0ba29d63637ef675572c445ce979282cd2c8aec4423043d2649edd1e76d0667671c39e97d8ce14846c2bd9c327e417264e2888c11d1d8d1f5f7466279d6bca5585a0d5e24f5605e8967f8cb8799644e82c962a1b0c9c810c3cd13eef4a5318a4d7561fea32202019747fb5321a38869a5a71e98bf3a28d841b0393146afd55dca6de0866bc42f9a0962d8d8444b1c002d171a6018237193d502e7edd4956b3779b9547e82135e4030ef58fea7846836c96666dc8d35901c9a8263476145a98e6730c291714da8a1d1640120775705a7154515438112ac9b34812ed9939d4d6f088d6fe82cb43971db2f4ebec832da9d4092427c48e338fc0a1d62311abcb346f75043ed2baf2f11c78c2f22d2bdbb76a3fd1fb0688b00ac598271f5120519237c50d6568854fc618ea6808a0c30d17a0a509862956fb662666142e6fd2614046dccea4c698ed00ffcc86e9d5085a5da253048c7873bf05bd0e0f618401550442be563e1abcb9692d0968f1bff328fb28a0600f6036512eabc7da1ffb4944f40069f2917deacfd98bb7b92b41969c1237f4bc7de50654177c3c54850a8a2c40a3fa343bcdc9c00aa239544935ee9823b14782c683ac16cca9032446c8fa8a5b98e228fd023648b771f7cff048eb2322cdba1cc2087de75150f136ed7ac27aef79d35fe97bca7a41961a36dd9bba6e7b7265db162d250b174ec2ea8612a5db74eb9611830521f093d2fe877705579fec3e45b9824f5fd16e12ff430c332fc2c0b59d31d259a7f66b10eaf4c3222abca560aef65fd403282913a50bb4aa3a3ad3114f3f54523a1a371879e64e51c9367e2a99f47e63f9b1357f79392abf654ad86944f168f0f76a345cea526c4bfe2981d60a6d1a814bff8bcdcbe6876890599f6dec3ef8e82f4bd69ad7a19e46e0606a4329f2b4af9b78ee39ff1ee0c9ad60f297d7ca9ecc3b0c3caefbc80dffa0ce146c39244f47694acd467477439388073dfb07676cf8a3cc304128b85661008025b50accb3f0a5c3cdd3748be35b454100c9acc2827e4b7687e77d7eba312c827dc0ea79606cb2e4b891c4981326f16de61607adc33763090f264452d4ff5828480a5104d9575e22ba3bf933fd8b5fef86604a6fd09729eaef8452114a81a389341407f16ae38470a9b323d88dfdf601ad2d37ad792a189a46dc0891f737d7e30edc367703e286cadbd9ef9df8fa1cfea5f32fd7c63856eacdad426c66559b1db5173a40f7f0a00130cd8409a38c9d916146e470d59fd112187536d4864b75a7f9447772684ee395723caf061070a820a74612cdb94d9d9c77bbbfe9f3e9230a03459b6443128c40c94abd5d4d0f54a410d3c3773f0c01d277d7af663736bc8430de5b17c7a34ad178f71c48b4a0a5f5808ea89c4a9dc07f4e858ca0cc79f75778f48529a789d262f3c43c0388455d6c2677f525462a2cbc86f1e50dce02be151f2e98ce306f4e2fb2124a8b1bcf89b3c12b324e060fa01694b10aea7be9af82bd417c0d774e7e7b3ae0bb408c0dfc93030773f06c355dc506c4ea0073476c727313094ddb9e3630e909c78ea39d134ccea5edba7c25d3199dd96066a25099093debacb2262509c4fdccf14e9f95185bd352490c9a9fe70c121bc1482ccd4942f10f3d4345d8c8fa25be80ea7fc18649b94984cbc5a3681baeeb23fd58daa6264b403a9030b3fed21cf0f4eaa85933fc73483704543a7dc09db49d2aa84b39d67b1b40def98a0b8ca043bd37cec8905bf11c1d53fff6ee206c5099ba8e94010f39aa815d4be615aeb84da36d6979dae9ef50bf24f6e3950f11ee8d4a02281472d95f9c456db074fa03fb6928a0560afc10269504c7d43c7f70dbcba1ec1c50ae69cbf7e63facd36eea093cee45c02ab04c6903fe8cc2c40662b85f7571b8907954ee81d45c1e1a1656cb5cfe2765b552887bc0cc853ea845562e5b9c8dfbc65b5620a9c711db488d55960c5ef2023f2069885a7d495010f84950de3bd0431f4c70da43b4f01e1091bf35f34e4522cef77029bdb76e5d730ed72d4f782257a49525f0c188ae4b6d43f49d881cf775d84c197a1801c8879ecb805e5d5a404476e813ae882ef5f53cad8e22bd40b646dc9a1c5f8b157eca9c2402d6184482436f8aa0688f85a1e38c605d1b56a92b36b5a8564b773baae8828c6a783696568d84de2f8bb5023782245f5ace4bda5956cd25459dd7db516e82ecd1b261a15f5dda3ada6c3e5ca812a6b5778c2380419111d13d12674283ff2b21f377a908683c18a3a4d193ab875f25b7ca9fbbe7bbcf25b6f14913c8fe89dba0073bd82b01e67bd4802149f03cd46d5a58a0b9776b16af8786896eb0d6b2f2dc3e60808747a284fc"}, 0x1009, 0x2) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) 02:32:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0), 0x0) ioctl(r0, 0xfff7ffffffffffc8, &(0x7f0000000080)) 02:32:28 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ppoll(&(0x7f0000000440)=[{r0}], 0x1, 0x0, &(0x7f00000004c0)={0x100000000}, 0x8) 02:32:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 02:32:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 02:32:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$nbd(0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 02:32:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) rt_sigpending(&(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000100)=[{0x50}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f0000000600)=""/181, 0xb5}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000003c0)='/dev/vcs\x00', 0x9) 02:32:28 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 02:32:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 02:32:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 02:32:28 executing program 5: 02:32:28 executing program 5: 02:32:28 executing program 3: 02:32:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0xc, 0x209e20, 0x8000000001, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:32:29 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 02:32:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) fstatfs(r0, &(0x7f0000005200)=""/4096) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 02:32:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0xd35a}}) 02:32:29 executing program 3: 02:32:29 executing program 0: 02:32:29 executing program 4: 02:32:29 executing program 1: 02:32:29 executing program 3: 02:32:29 executing program 5: 02:32:29 executing program 2: 02:32:29 executing program 1: 02:32:29 executing program 2: 02:32:29 executing program 4: 02:32:29 executing program 3: 02:32:29 executing program 5: 02:32:29 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) 02:32:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f00000000c0), 0x9a) 02:32:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bc070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x4, 0x101}, 0x91) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000000), 0x0}, 0x18) 02:32:30 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) close(r2) syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:32:30 executing program 5: epoll_create1(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x0, 0x0, 0xfffffffffffffd51) 02:32:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="24000000f4d3fbb109fe752b33a0565800000000"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 02:32:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)={'security\x00'}, 0x0) 02:32:30 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0xfd32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 02:32:30 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:32:30 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000000)='proc'}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xffffff4f) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) 02:32:30 executing program 0: r0 = open(&(0x7f0000000140)='.\x00', 0x143042, 0x0) gettid() ptrace$peekuser(0x3, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$P9_RCLUNK(r0, 0x0, 0x0) 02:32:30 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f49c2a77033bdb9072bff9f507386dcfa4a8e9fabdd3fb1402682653fa8cdb82b113e8d343d76a4"]]], 0x8}, 0x0) 02:32:30 executing program 4: socket$inet6(0xa, 0x4, 0x7fffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f0000000040)) r1 = accept4$unix(r0, &(0x7f0000000480)=@abs, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) msync(&(0x7f0000953000/0x3000)=nil, 0x3000, 0x0) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="08000200e0000002"], 0x1}}, 0x0) socketpair(0x13, 0x0, 0x1f, &(0x7f0000000000)) ftruncate(r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 02:32:30 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:32:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="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", 0x1000, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 02:32:30 executing program 0: socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, &(0x7f0000002340)=r0, 0x4) 02:32:31 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:32:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000c00000000000000080001007366710048000200000000000000001d000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 02:32:31 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9da8ebe6923bc8e9bb184f2c6d7630103b77"], 0x1, 0x0, 0x0) 02:32:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000001840)}, {0x0}], 0x2}, 0x4008850) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000a80)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1ff}, 0x0) mkdir(0x0, 0xc8) socketpair(0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000b00)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') 02:32:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/225, 0xe1}], 0x1, 0x0) [ 908.377138] device lo entered promiscuous mode 02:32:31 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a05"], 0x1, 0x0, 0x0) 02:32:31 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f49c2a77033bdb9072bff9f507386dcfa4a8e9fabdd3fb1402682653fa8"]]], 0x8}, 0x0) 02:32:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000640)=0x40000000002, 0x4) sendto$inet(r1, &(0x7f0000000000)="dd", 0x1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:32:31 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b29a453bc85247288788994dbf3758b5887e7775"], 0x1e}, 0x0) 02:32:31 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp6\x00') sendfile(r0, r1, 0x0, 0x80000002) 02:32:31 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000000c0), 0x4) 02:32:31 executing program 0: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 02:32:31 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x410000, 0x160) pwrite64(r0, &(0x7f0000000100)="a1fd797f75b25dde0154e32c16cfe81afaa4ad6f6db5c0d45537030067b9f8d7003b07e37376283eaf380c2258d931d34f18b7d1f69c85c4ac94a7da468c31fab86ac5c9906ecdd7b4d9888f3c4f5740e302962761c9f61c4959971168458a39169f8290fc414d", 0x67, 0x0) r1 = gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 02:32:31 executing program 4: creat(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffe59) socket$unix(0x1, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r3 = dup3(r0, r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xffffff64) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, 0x0, 0x2e2) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x211dcd79bb7f8bb4) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) tkill(r2, 0x1000000000016) 02:32:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000b300)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000026c0)='E', 0x1}], 0x1}}], 0x1, 0x0) 02:32:32 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:32:32 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) msync(&(0x7f0000953000/0x3000)=nil, 0x3000, 0x0) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 02:32:32 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) msync(&(0x7f0000953000/0x3000)=nil, 0x3000, 0x0) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 02:32:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={[], [], @local}}, 0x14) 02:32:32 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b29a453bc8524728878899"], 0x15}, 0x0) 02:32:32 executing program 2: socket$inet6(0xa, 0x2, 0x9) 02:32:32 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 02:32:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) clock_settime(0x1, &(0x7f0000000140)={0x0, 0x989680}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x5654807, 0xefc8a00910d88312) 02:32:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000800)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 02:32:32 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000000)='proc'}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xbfffffffffffffff, r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xfffffea8) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) 02:32:32 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x4f06c1cd) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file1/file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1/file1\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)='./file1/file0\x00') 02:32:33 executing program 4: socket$inet6(0xa, 0x4, 0x7fffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f0000000040)) r1 = accept4$unix(r0, &(0x7f0000000480)=@abs, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 02:32:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000c00000000000000080001007366710048000200000000000000001d000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 02:32:33 executing program 3: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0) 02:32:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000800)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x41e) 02:32:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000010707121dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:32:33 executing program 2: socketpair$unix(0x1, 0x2000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '/selinux/enforce\x00'}, 0x2a, 0x0) 02:32:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x43, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 02:32:33 executing program 4: socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') dup2(r1, r2) 02:32:33 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753240371707ce958005241b6d46a627c320000000000000000392f39d9b3980e8e07ddb3254ea10cb495226c3ab89d58ec49d7bd5f441cdb58a876"], 0x1, 0x0, 0x0) 02:32:33 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff6b, &(0x7f0000000940)=0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00') arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000680)={0x1f, {0x0, 0x9, 0x3, 0x0, 0x0, 0x7}, 0x400}, 0xa) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10040000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_AIE_OFF(r1, 0x7002) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)=""/204, 0xcc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0, 0x1501}, 0x2c) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x400, 0xa) getgid() connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) add_key(&(0x7f00000001c0)='cifs.srgoL\xba]\xa4bLWD\xd3a\x1ed', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="9b68d05fd2c86ce86915964bea150d31254488764f7f8929a86f7737ff750f4f8ebc5074d5ac0ca066a76e7094c3e3ba85350e7e6a1f59694241e09759cd523fe3cb0eb7986bbb32386b825f49e54e972c6bd0473860dff8522981", 0x5b, 0xfffffffffffffffc) ioctl$RTC_PIE_OFF(r1, 0x7006) prctl$PR_GET_DUMPABLE(0x3) accept$unix(r1, &(0x7f0000000140), &(0x7f0000000200)=0x6e) write$FUSE_GETXATTR(r1, &(0x7f0000000300)={0x18, 0x0, 0x8, {0xfff}}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt_acct\x00') splice(r2, &(0x7f0000000280), r0, &(0x7f00000002c0), 0x9, 0x4) 02:32:34 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="600000194ee848a213fc6488028f7147cc08339f77f3e7fbaacd63563b0d57f14c8bd28d708837bb5c920bb4880ccab072"], 0x31}, 0x0) 02:32:34 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) flock(r0, 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2000000000000003) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5080085f6017afe5348ea0000000000864d72a8d987b4026d876296918a2b35e362c613f350b31d5ade9634d4ee55f1826672d3259193150d503ca3a07dea8a942679c1528f1edbacd283f8ad8d23a0bf1a4e46380968a15a99dfea096b5a1a5cf001876c768f2000"], 0x69}, 0x0) 02:32:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x531) close(r1) 02:32:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="23000000200081ae00060c00000f000002000000000000f28701546fabca1b4e7d06a4", 0x23}], 0x1}, 0x0) 02:32:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6083d98e00101100fe8000000000000000000000e000000100009078000000000000000000000000e02efe6f8044c8486fb537f2ab7deba8193cd27135b4bc32cb8148feac25bf7471a6fefcdc281c5cc7dcbc4b79f63099fb8f5cbb62deb00426d53e2abc22eb5384b4efe52f5c49b2f6af5a8a62b0d2141044d0898eac1e9d97612dbea0b7d4c7abb542a58ab95cd4c46749ed0eee5d90ce29aafcc5aff81c55b937b334b35b1f60b2e02f633e79452c0465b8f9d979"], 0x0) 02:32:34 executing program 4: syz_execute_func(&(0x7f0000000000)="cd8075fc1db0444469ef69dc00d9c4017d50ee3e8adcdcd01192000880410fd1b0b5d90000797cc4c30d79134a0fcfc463d25f2865ea67440f0f9d0a000000aa3b4d4d4080d8137f41dfdf400f01efe5e59dc443ad7e50fd092f16c4e13d5ea2000001000a9a0a460fe4c171fccddfde9fda") 02:32:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xbc8e57a155d203b2) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0xfffffffffffffe2f) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg(r1, &(0x7f0000000780)={&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)="7ba31d105da9583466248b3aec6dd2d03f2ef3c87ed942cd4998070dbbb0f0f5bce4014c4d5139c947cb7c76097c7ade5f9631bc989de02e8fde20b9fc", 0x3d}], 0x1}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8004010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=@deltfilter={0x2c, 0x2d, 0x202, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, {0xd}, {0x0, 0xfffd}, {0xfff3}}, [@TCA_RATE={0x8, 0x5, {0x800, 0x7fffffff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4015) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 911.377828] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 911.406207] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 02:32:34 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000005c0)={@link_local, @random="8b01359b1dfc", [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @dev, "ff516239", @broadcast, "afd9622664bc2229c59823207d6a809f"}}}}, 0x0) 02:32:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:32:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000580), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:32:34 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fdea037aa51de3953db0b29a453bc85247288788994dbf3758b5887e"], 0x1c}, 0x0) [ 911.668748] binder: 28349:28351 got reply transaction with no transaction stack [ 911.676485] binder: 28349:28351 transaction failed 29201/-71, size 0-0 line 2741 [ 911.752149] binder: undelivered TRANSACTION_ERROR: 29201 02:32:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 02:32:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r1, 0xb, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) 02:32:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 912.064469] binder: 28367:28368 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:32:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x531) close(r1) 02:32:35 executing program 0: timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) sendfile(r0, r0, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x2000005) 02:32:35 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@remote, @initdev}, 0x10) 02:32:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:32:35 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64869c000872e4f4dd7e0ae16087dcf944e3bd1ad1c4b87c1374cf2db8fa8ef9f041d50a208c8687c01a61026813c5d7740f462d77af2be0c8091339952da7dc622e785b1102b8c26b596db9baf566518c4bbdcdd30b5adb1ceaa2c684bd2fed0802908f4817b1acb7d22ac7217832234333f0031663444c456ef6530182609753240371707ce958005241b6d46a627c320000000000000000392f39d9b3980e8e07ddb3254ea10cb495226c3ab89d58ec49d7bd5f441cdb58a8764ef1419b4ce8adf8ebdad9a802aebc82323bc763a65db47a7826ddfb8051b0ad1c7048dd9e751f0f44de36edbf52417b046ebe27bf41067338f9dabd68fe05280c03b2c07c0dc4c1b6c6ba33f292b648"], 0x1, 0x0, 0x0) 02:32:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r1, &(0x7f0000001680)={0x0, 0xffffffffffffffd6, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl(r1, 0x4000008906, &(0x7f0000000000)) 02:32:35 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3}, @sack_perm, @mss={0x2, 0x6c8ad7e8}], 0x3) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x0, &(0x7f0000000040)={0x0}) nanosleep(&(0x7f0000000100)={r6}, 0x0) tkill(r0, 0x15) tkill(r0, 0x1000000000016) ioctl$RTC_AIE_OFF(r3, 0x7002) socket$nl_netfilter(0x10, 0x3, 0xc) 02:32:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000580), 0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:32:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x800, 0x80400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x80000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000003c0)={0x1, 0x8000, 0xfe2, 0x7, 0xa, 0x0, 0x200, 0x5, 0x7f, 0x2, 0x7, 0x81}) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl(r5, 0x3, &(0x7f0000000300)="0dde5b4fe3144acd638adbaf95b4ad3a302b471ca3c47a5563e55c5c2722269c3aa55db63a136033ed17dbd7494bc4b0fe0f19066f45b831bd6ad9fcf60bed") ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f00000000c0)) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r6, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:32:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0f\x82U~\xf9\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') lseek(r1, 0x400000, 0x1) 02:32:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x531) close(r1) 02:32:36 executing program 0: timer_getoverrun(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x0, 0x0, 0xfffffffffffffd51) 02:32:36 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9da8ebe6923bc8e9bb184f"], 0x1, 0x0, 0x0) 02:32:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) 02:32:36 executing program 5: 02:32:36 executing program 4: 02:32:36 executing program 3: 02:32:36 executing program 5: 02:32:36 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000c709c18586e2c03c112d020000010000000000000000000000197f24acc233eeae0750e03690e3"], 0x1, 0x0, 0x0) 02:32:36 executing program 5: pipe2(&(0x7f0000000080), 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000540)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x74eda5c2}) 02:32:36 executing program 3: 02:32:36 executing program 4: 02:32:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x531) close(r1) 02:32:37 executing program 0: 02:32:37 executing program 3: 02:32:37 executing program 2: 02:32:37 executing program 4: 02:32:37 executing program 4: 02:32:37 executing program 3: 02:32:37 executing program 2: 02:32:37 executing program 0: 02:32:38 executing program 5: 02:32:38 executing program 2: 02:32:38 executing program 4: 02:32:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r1) 02:32:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000200)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x9, 0x20, 0x80, 0x8}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1}, 0xc) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='0\x00') 02:32:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') readv(r0, &(0x7f0000000100), 0x0) 02:32:38 executing program 5: 02:32:38 executing program 4: 02:32:38 executing program 2: 02:32:38 executing program 5: 02:32:38 executing program 4: 02:32:38 executing program 2: 02:32:38 executing program 0: 02:32:38 executing program 3: 02:32:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x2d) close(r1) 02:32:38 executing program 5: 02:32:38 executing program 4: 02:32:38 executing program 0: 02:32:38 executing program 2: 02:32:38 executing program 3: 02:32:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x2d) close(r1) 02:32:38 executing program 0: 02:32:38 executing program 5: 02:32:38 executing program 2: 02:32:38 executing program 4: 02:32:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x2d) close(r1) 02:32:38 executing program 3: 02:32:38 executing program 0: 02:32:39 executing program 5: 02:32:39 executing program 3: 02:32:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r1) 02:32:39 executing program 0: 02:32:39 executing program 4: 02:32:39 executing program 2: 02:32:39 executing program 5: 02:32:39 executing program 0: 02:32:39 executing program 3: 02:32:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r1) 02:32:39 executing program 2: 02:32:39 executing program 4: 02:32:39 executing program 3: 02:32:39 executing program 0: 02:32:39 executing program 5: 02:32:39 executing program 2: 02:32:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r1) 02:32:39 executing program 0: 02:32:39 executing program 3: 02:32:39 executing program 5: 02:32:39 executing program 4: 02:32:39 executing program 3: 02:32:39 executing program 0: 02:32:40 executing program 2: 02:32:40 executing program 5: 02:32:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(0xffffffffffffffff) 02:32:40 executing program 4: 02:32:40 executing program 5: 02:32:40 executing program 0: 02:32:40 executing program 3: 02:32:40 executing program 2: 02:32:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:40 executing program 4: 02:32:40 executing program 5: 02:32:40 executing program 0: 02:32:40 executing program 2: 02:32:40 executing program 3: 02:32:40 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:40 executing program 2: 02:32:40 executing program 4: 02:32:40 executing program 0: 02:32:40 executing program 5: 02:32:40 executing program 3: 02:32:40 executing program 2: 02:32:40 executing program 0: 02:32:40 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 02:32:41 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000005c0)) tkill(0x0, 0x3a) write(r3, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffff92, 0x123}, 0x694) read(r2, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffff9c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:32:41 executing program 5: 02:32:41 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(0xffffffffffffffff) 02:32:41 executing program 0: 02:32:41 executing program 2: 02:32:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$KDSKBLED(r1, 0x4b65, 0x0) mmap(&(0x7f00000d8000/0x1000)=nil, 0x1000, 0x0, 0x31, r1, 0x0) 02:32:41 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/11, 0xb) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffc0a) prctl$PR_GET_TIMERSLACK(0x1e) syz_execute_func(&(0x7f0000000040)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c3654c69000b3e0f11581010196f04cd04cd0f2902") 02:32:41 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4, "2d6d137b"}, 0x0) 02:32:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000140)={0x0, 0xfdfdffff, 0x0}) 02:32:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$session_to_parent(0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x27c, 0xad, 0x0, 0x4, 0x0, 0x52d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7}, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x77359400}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)) r4 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) prctl$PR_SVE_GET_VL(0x33, 0x15351) 02:32:41 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x103e, 0x0) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) r1 = epoll_create1(0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) open$dir(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) [ 918.477380] ion_ioctl: ioctl validate failed 02:32:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, &(0x7f0000000040)) 02:32:42 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:42 executing program 2: r0 = getpgrp(0x0) migrate_pages(r0, 0x4, 0x0, &(0x7f00000001c0)=0xae6a) 02:32:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$session_to_parent(0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x27c, 0xad, 0x0, 0x4, 0x0, 0x52d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7}, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x77359400}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)) r4 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) prctl$PR_SVE_GET_VL(0x33, 0x15351) [ 919.091165] QAT: Device 0 not found 02:32:42 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:42 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, r0) write$P9_RUNLINKAT(r1, 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x12) dup2(r1, r3) tkill(r0, 0x80000000000016) 02:32:42 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:42 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$session_to_parent(0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7}, 0x7) timer_create(0x20000000005, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) 02:32:42 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:42 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x3502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'vxcan1\x00', 0x33}) 02:32:42 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:42 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x103e, 0x0) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) r1 = epoll_create1(0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) open$dir(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 02:32:42 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x103e, 0x0) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) r1 = epoll_create1(0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) open$dir(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 02:32:42 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:42 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x103e, 0x0) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) r1 = epoll_create1(0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) open$dir(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 02:32:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$session_to_parent(0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x27c, 0xad, 0x0, 0x4, 0x0, 0x52d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7}, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x77359400}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)) r4 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) prctl$PR_SVE_GET_VL(0x33, 0x15351) 02:32:43 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x103e, 0x0) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) r1 = epoll_create1(0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) open$dir(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 02:32:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x9a02102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 02:32:43 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:43 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:43 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:43 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(r0) 02:32:43 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x103e, 0x0) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) r1 = epoll_create1(0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) open$dir(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 02:32:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 02:32:43 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:43 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, 0x0, 0x0, 0x0) close(r0) 02:32:43 executing program 2: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000280)=""/112) 02:32:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$session_to_parent(0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x27c, 0xad, 0x0, 0x4, 0x0, 0x52d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7}, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x77359400}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)) r4 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) prctl$PR_SVE_GET_VL(0x33, 0x15351) 02:32:44 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:44 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, 0x0, 0x0, 0x0) close(r0) 02:32:44 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x103e, 0x0) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) r1 = epoll_create1(0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) open$dir(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 02:32:44 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:32:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x9a02102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 02:32:44 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:44 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, 0x0, 0x0, 0x0) close(r0) 02:32:44 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {0x10000000000000cf}}) 02:32:44 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) close(0xffffffffffffffff) 02:32:44 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:44 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x0) write$P9_RVERSION(r0, 0x0, 0x0) 02:32:44 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f00000001c0), 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 02:32:44 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_settime(0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000100)={0x2, 0x4, 0x6, 0x2}) 02:32:44 executing program 0: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_open_dev$vivid(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x106) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), 0x0) 02:32:44 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) open(&(0x7f0000000100)='./file0\x00', 0x3ffd, 0x40) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 02:32:45 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:45 executing program 3: 02:32:45 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:45 executing program 3: 02:32:45 executing program 5: 02:32:45 executing program 1: 02:32:45 executing program 3: 02:32:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:45 executing program 0: 02:32:45 executing program 3: 02:32:49 executing program 2: 02:32:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:49 executing program 1: 02:32:49 executing program 5: 02:32:49 executing program 3: 02:32:49 executing program 0: 02:32:49 executing program 3: 02:32:49 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:50 executing program 1: 02:32:50 executing program 0: 02:32:50 executing program 5: 02:32:50 executing program 2: 02:32:50 executing program 3: 02:32:50 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:50 executing program 1: 02:32:50 executing program 0: 02:32:50 executing program 5: 02:32:50 executing program 2: 02:32:50 executing program 1: 02:32:50 executing program 0: 02:32:50 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) 02:32:50 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 02:32:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=@gettclass={0x24, 0x2a, 0x109, 0x0, 0x0, {0x0, r2}}, 0x24}}, 0x0) 02:32:50 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x3) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 02:32:50 executing program 0: 02:32:50 executing program 3: 02:32:50 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:50 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a0595e0556cd35667719a01"], 0x1, 0x0, 0x0) 02:32:50 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a0595e0556cd35667719a0100000000000000cb4f11d1ecc5db8583cb9f15640c3cbf982435e3ea6e139dc30a989e967c2ec6cfc3081c29793d"], 0x1, 0x0, 0x0) 02:32:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) r1 = dup(r0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 02:32:50 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16ea) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5395797165ca5688fde9fb753c0a4ba39ecb17d7e77f91ce9d89f8cffaaa4fc977a55a1497e5808365cea47d7c1513f030a7db82cf8cdb2e06191bd7869c763f9c5d3a3ac9797d1201605cb3c72ecdbadbe9e3801150fae50441e3351f751f34d998b1c8a9c4817f6bbd999c13f9e796df9302828f7fd946bc90a59a3ea73dfab576c4fd3de3853e157c3adcd3ee77f230ccebe57b1a3a773be196cf6726591bbdd4cc57b6ddbcd2c0f13d23ddf80d803a6d0327234710f66ebc83ed3e4bd1e76d0fcddd596e367a0d13e584ce7899edf5a50f42d1c8c291ba66ae51cfbb0000000"], 0xe2}, 0x0) 02:32:51 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000180)=0x80000000001, 0x4) sendmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000000c00)=@nl=@proc, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000000240)}}, {{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000005500), 0xc2, &(0x7f0000005540)}, 0x516b}], 0x2, 0x0) syz_genetlink_get_family_id$net_dm(0x0) 02:32:51 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9da8ebe6923bc8e9bb184f2c6d763010"], 0x1, 0x0, 0x0) 02:32:51 executing program 1: socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000200)}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000300)='0\x00') 02:32:51 executing program 5: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) fchmod(r0, 0x1) 02:32:51 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 02:32:51 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:32:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0), 0xffffffffffffffa0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x80000000000031, 0xffffffffffffffff, 0x0) 02:32:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 02:32:51 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'veth0_to_+ \x00', 0x800}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r3, 0x28, &(0x7f0000000600)}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fffffff) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000340), 0x12) recvmsg(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000000c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000009800)={&(0x7f0000009700)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000009780), 0x0, &(0x7f00000097c0)=""/16, 0x10}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f0000009840)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, [], r5, 0xb}, 0x48) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) sendmsg$kcm(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000a00)}, 0x800) write$cgroup_int(r7, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000780)='cpu.stat\x00') ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0) r8 = gettid() perf_event_open(&(0x7f0000000840)={0x3, 0x70, 0x78b, 0xfffffffffffffffa, 0x1154, 0xa47f, 0x0, 0x101, 0x69, 0xf, 0x3ff, 0x1, 0x1, 0x8, 0x5, 0x93a4, 0xebe3, 0x0, 0x3ff, 0x4, 0x8, 0x6ba7, 0x4, 0x68e, 0x7, 0x0, 0x0, 0x8, 0x1, 0x6, 0x100000001, 0x1, 0x80, 0xffffffffffffffff, 0x7, 0xdbf, 0x80000001, 0x0, 0x0, 0xa6d, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x802, 0x9, 0x1, 0x6, 0x9, 0x100000000, 0x7}, r8, 0xc, r6, 0x8) 02:32:51 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xfd6f) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c000000240000000700000096a9c0ccf3dec7e6ac0000000077d38a00de28cf19c63ccb117f31c36d84f8d97127debea037540b7e64543662705e1e05b2fc0c9fe03e4d1f2709b3295046914eb629c10c46395cbcba8cb06761362a9353a5ee860255111f68ad76b7d0d43c2d92e207ea634cc6cb1c0d"], 0x0, 0x83}, 0x20) write$cgroup_int(r1, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x8000000000001, 0x70, 0x0, 0x3dd, 0x559, 0x4, 0x0, 0xa2b, 0x0, 0x1, 0x6d63, 0x0, 0x0, 0x9, 0x61ef, 0x0, 0x0, 0x7, 0x0, 0x3, 0x1000, 0x749, 0xfffffffffffff6cf, 0xd79d, 0x0, 0x5, 0x0, 0x1, 0x9, 0x0, 0x0, 0xff, 0x3, 0x6, 0x80000001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14a02, 0x0, 0xfffffffffffffc00, 0x0, 0xfffffffffffffff9, 0x0, 0xe6f}, 0x0, 0xe, r2, 0xb) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6610, 0x1404) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000400)={'veth1\x00', 0x600}) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) socketpair(0x2, 0x7, 0xef3, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 928.459869] input: syz0 as /devices/virtual/input/input102 [ 928.493817] input: syz0 as /devices/virtual/input/input103 [ 928.532581] binder: binder_mmap: 28916 20ffe000-21000000 bad vm_flags failed -1 02:32:51 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400ae0008008992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000003580)=[{&(0x7f0000000400)=@abs, 0x40b, &(0x7f0000000480), 0x3df}], 0x1ac, 0x0) 02:32:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000016c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 02:32:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0), 0xffffffffffffffa0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x80000000000031, 0xffffffffffffffff, 0x0) 02:32:51 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:32:51 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) [ 928.902639] input: syz0 as /devices/virtual/input/input104 [ 928.971404] input: syz0 as /devices/virtual/input/input105 02:32:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 02:32:52 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f49c2a77033bdb9072bff9f507386dcfa4a8e9fabdd3fb1402682653fa8cdb82b113e8d343d76a4cf"]]], 0x8}, 0x0) 02:32:52 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:52 executing program 0: setpriority(0x0, 0x0, 0x64) 02:32:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:32:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x10, 0x11, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:32:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') sendfile(r0, r2, 0x0, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 02:32:52 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$eventfd(r1, &(0x7f0000000040), 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x800000000113}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 02:32:52 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:52 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000000000000002800000850000000000000095"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000008500000041000000"], 0x0, 0x41, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="0494c16d15656fc30b46585fde1e", 0x0, 0xf000}, 0x28) socket$kcm(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 02:32:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x60000008}) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:32:52 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f00)) unshare(0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) tkill(0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 929.843980] ptrace attach of "/root/syz-executor3"[28987] was attempted by "/root/syz-executor3"[28990] 02:32:53 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:53 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000002000e2ffffff000025c818390cc3b46561c01a0000000000ed0000f2ff000000000000bb146733d7520b85a536690897285855e8d1db5af2fc84451e2a407dfe7951527b0e7fe871f82416571aa4f0a3e633f6152aa4bb619c711b6580e206a56f23edc3ce092f7b780a76275d0f662dc36b060d740a0595e0556cd35667719a0100000000000000cb4f11d1ecc5db8583cb9f15640c3cbf982435e3ea6e13"], 0x1, 0x0, 0x0) 02:32:53 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9da8ebe6923bc8e9bb184f2c6d7630103b775c"], 0x1, 0x0, 0x0) 02:32:53 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r1) close(r0) 02:32:53 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000006c0)) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:32:55 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394075bd7671208c7a8c823e57672829665fbd646f5aafa7d709a536939e994a12f49c2a77033bdb9072bff9f507386dcfa4a8e9fabdd3fb1402682653fa8cdb8"]]], 0x8}, 0x0) 02:32:55 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:55 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000200)}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='0\x00') 02:32:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_setup(0x4e4, &(0x7f0000000040)=0x0) io_destroy(r1) 02:32:55 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x2, 0x0) r1 = dup(r0) write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x7) 02:32:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x60000008}) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:32:56 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 02:32:56 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9da8ebe6923bc8e9bb184f2c6d7630103b775cc8d81702ce321ed499d12d45b46116e365ac3e1f47e43e3da725113d5b611d19afacb84675d6c35bb930094831"], 0x1, 0x0, 0x0) 02:32:56 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) getpid() getpgrp(0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @loopback, @empty, 0x3, 0x0, 0x0, 0x800000000113}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 02:32:56 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:32:56 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:56 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4430e0bad6e9da8ebe6923bc8e9bb184f2c6d7630103b775cc8d81702ce321ed499d12d45b46116e365ac3e1f47e43e3da725113d5b611d19afacb84675d6c35bb9300948316439"], 0x1, 0x0, 0x0) 02:32:56 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x10, 0x11, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) [ 933.297794] ptrace attach of "/root/syz-executor5"[29063] was attempted by "/root/syz-executor5"[29064] 02:32:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:32:56 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x10, 0x11, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) 02:32:56 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x60000008}) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:32:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) r3 = dup2(r1, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, r4, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) setsockopt$inet_mreq(r2, 0x0, 0x0, 0x0, 0x0) 02:32:56 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:32:56 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x10, 0x11, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) 02:32:56 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)=ANY=[]) 02:32:56 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:32:57 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000800)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000280)) 02:32:57 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x10, 0x11, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) 02:32:57 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 02:32:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}}}, 0xf8}}, 0x0) io_setup(0xadb, &(0x7f0000000040)) 02:32:57 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:32:57 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 02:32:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x60000008}) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:32:57 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) readv(r0, &(0x7f0000000840)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/32, 0x20}], 0x3) 02:32:57 executing program 0: r0 = socket(0x40000000002, 0x80000000000003, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") socket$nl_route(0x10, 0x3, 0x0) sendto$unix(r0, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)='\v', 0x1}], 0x1}], 0x1, 0x0) 02:32:57 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 02:32:57 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:32:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 02:32:58 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 02:32:58 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64869ca32f1609cab883efc4"], 0x1, 0x0, 0x0) 02:32:58 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:32:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) semget$private(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syncfs(0xffffffffffffffff) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syncfs(r1) 02:32:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:32:58 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x10, 0x0, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) 02:32:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x60000008}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:32:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000000000000538dbba2b150d17600000000"], 0x1}}, 0x0) accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 02:32:58 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x10, 0x0, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) 02:32:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:32:59 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x10, 0x0, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) 02:32:59 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:32:59 executing program 5: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:32:59 executing program 4: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000f80000)='./file0\x00', 0x80001040, 0x0) execve(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0xb) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000480)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) 02:32:59 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:32:59 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:32:59 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) close(r0) 02:32:59 executing program 4: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:33:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x60000008}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:33:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{}, {0x0, 0x2}}) 02:33:00 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:33:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) syz_genetlink_get_family_id$ipvs(0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 02:33:00 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:33:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000180)) 02:33:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2b, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) 02:33:00 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) [ 937.634966] cgroup: fork rejected by pids controller in /syz5 02:33:00 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x4) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 02:33:00 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x622, 0x0) 02:33:01 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:33:01 executing program 4: creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x400002100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='coda\x00', 0x0, 0x0) io_setup(0x395, &(0x7f0000000080)=0x0) io_destroy(r0) [ 937.990004] print_req_error: I/O error, dev loop5, sector 1024 02:33:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x60000008}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:33:01 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$session_to_parent(0x12) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x400, 0x4400) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x10003, 0x17}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000680)={0x60, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @initdev}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) 02:33:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) 02:33:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000680)={0x28, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 02:33:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000040)="b7b3f4a0d5dbe6e35791d7bd7ca2c9f5", 0x10) write$binfmt_misc(r0, 0x0, 0x0) 02:33:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget$private(0x0, 0x3, 0x504) semctl$GETZCNT(r1, 0x0, 0xf, 0x0) [ 938.687419] Enabling of bearer rejected, failed to enable media [ 938.708393] Started in network mode [ 938.712300] Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 938.720606] New replicast peer: 172.30.0.0 [ 938.725446] Enabled bearer , priority 10 [ 938.739897] ================================================================== [ 938.741518] BUG: KMSAN: uninit-value in __copy_skb_header+0x292/0x760 [ 938.749848] CPU: 0 PID: 29255 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #2 [ 938.749848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.749848] Call Trace: [ 938.749848] dump_stack+0x173/0x1d0 [ 938.749848] kmsan_report+0x12e/0x2a0 [ 938.749848] __msan_warning+0x82/0xf0 [ 938.749848] __copy_skb_header+0x292/0x760 02:33:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x622, 0x0) [ 938.749848] __skb_clone+0xa2/0x990 [ 938.749848] skb_clone+0x3e8/0x580 [ 938.749848] netlink_deliver_tap+0x7b3/0xec0 [ 938.749848] netlink_unicast+0x9cd/0x1020 [ 938.749848] ctrl_getfamily+0xad2/0xba0 [ 938.749848] ? ctrl_fill_info+0x1d40/0x1d40 [ 938.749848] genl_rcv_msg+0x185f/0x1a60 [ 938.749848] ? __msan_poison_alloca+0x1f0/0x2a0 [ 938.749848] netlink_rcv_skb+0x444/0x640 [ 938.749848] ? genl_unbind+0x390/0x390 [ 938.749848] genl_rcv+0x63/0x80 [ 938.749848] netlink_unicast+0xf40/0x1020 [ 938.749848] netlink_sendmsg+0x127f/0x1300 [ 938.749848] ___sys_sendmsg+0xdb9/0x11b0 [ 938.749848] ? netlink_getsockopt+0x1460/0x1460 [ 938.749848] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 938.749848] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 938.749848] ? __fget_light+0x6e1/0x750 [ 938.749848] __se_sys_sendmsg+0x305/0x460 [ 938.749848] __x64_sys_sendmsg+0x4a/0x70 [ 938.749848] do_syscall_64+0xbc/0xf0 [ 938.749848] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 938.749848] RIP: 0033:0x411db1 [ 938.749848] Code: 75 14 b8 2e 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 74 18 00 00 c3 48 83 ec 08 e8 ea fa ff ff 48 89 04 24 b8 2e 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 fb ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 938.749848] RSP: 002b:00007fa8ba3759c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 938.749848] RAX: ffffffffffffffda RBX: 00007fa8ba375a58 RCX: 0000000000411db1 [ 938.749848] RDX: 0000000000000000 RSI: 00007fa8ba375a00 RDI: 0000000000000005 [ 938.749848] RBP: 0000000000000005 R08: 0000000000000009 R09: 0000000000000000 [ 938.749848] R10: 00007fa8ba3769d0 R11: 0000000000000293 R12: 00007fa8ba375a40 [ 938.749848] R13: 00000000004cd338 R14: 00000000004db1a0 R15: 00000000ffffffff [ 938.749848] [ 938.749848] Uninit was created at: [ 938.749848] kmsan_internal_poison_shadow+0x92/0x150 [ 938.749848] kmsan_kmalloc+0xa6/0x130 [ 938.749848] kmem_cache_alloc+0x572/0xb90 [ 938.749848] skb_clone+0x300/0x580 [ 938.749848] netlink_deliver_tap+0x7b3/0xec0 [ 938.749848] netlink_unicast+0x9cd/0x1020 [ 938.749848] ctrl_getfamily+0xad2/0xba0 [ 938.749848] genl_rcv_msg+0x185f/0x1a60 [ 938.749848] netlink_rcv_skb+0x444/0x640 02:33:02 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x400002100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='coda\x00', 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) [ 938.749848] genl_rcv+0x63/0x80 [ 938.749848] netlink_unicast+0xf40/0x1020 [ 938.749848] netlink_sendmsg+0x127f/0x1300 [ 938.749848] ___sys_sendmsg+0xdb9/0x11b0 [ 938.749848] __se_sys_sendmsg+0x305/0x460 [ 938.749848] __x64_sys_sendmsg+0x4a/0x70 [ 938.749848] do_syscall_64+0xbc/0xf0 [ 938.749848] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 938.749848] ================================================================== [ 938.749848] Disabling lock debugging due to kernel taint [ 938.749848] Kernel panic - not syncing: panic_on_warn set ... [ 938.749848] CPU: 0 PID: 29255 Comm: syz-executor5 Tainted: G B 4.20.0-rc7+ #2 [ 938.749848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.749848] Call Trace: [ 938.749848] dump_stack+0x173/0x1d0 [ 938.749848] panic+0x3ce/0x961 [ 938.749848] kmsan_report+0x293/0x2a0 [ 938.749848] __msan_warning+0x82/0xf0 [ 938.749848] __copy_skb_header+0x292/0x760 [ 938.749848] __skb_clone+0xa2/0x990 [ 938.749848] skb_clone+0x3e8/0x580 [ 938.749848] netlink_deliver_tap+0x7b3/0xec0 [ 938.749848] netlink_unicast+0x9cd/0x1020 [ 938.749848] ctrl_getfamily+0xad2/0xba0 [ 938.749848] ? ctrl_fill_info+0x1d40/0x1d40 [ 938.749848] genl_rcv_msg+0x185f/0x1a60 [ 938.749848] ? __msan_poison_alloca+0x1f0/0x2a0 [ 938.749848] netlink_rcv_skb+0x444/0x640 [ 938.749848] ? genl_unbind+0x390/0x390 [ 938.749848] genl_rcv+0x63/0x80 [ 938.749848] netlink_unicast+0xf40/0x1020 [ 938.749848] netlink_sendmsg+0x127f/0x1300 [ 938.749848] ___sys_sendmsg+0xdb9/0x11b0 [ 938.749848] ? netlink_getsockopt+0x1460/0x1460 [ 938.749848] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 938.749848] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 938.749848] ? __fget_light+0x6e1/0x750 [ 938.749848] __se_sys_sendmsg+0x305/0x460 [ 938.749848] __x64_sys_sendmsg+0x4a/0x70 [ 938.749848] do_syscall_64+0xbc/0xf0 [ 938.749848] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 938.749848] RIP: 0033:0x411db1 [ 938.749848] Code: 75 14 b8 2e 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 74 18 00 00 c3 48 83 ec 08 e8 ea fa ff ff 48 89 04 24 b8 2e 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 fb ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 938.749848] RSP: 002b:00007fa8ba3759c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 938.749848] RAX: ffffffffffffffda RBX: 00007fa8ba375a58 RCX: 0000000000411db1 [ 938.749848] RDX: 0000000000000000 RSI: 00007fa8ba375a00 RDI: 0000000000000005 [ 938.749848] RBP: 0000000000000005 R08: 0000000000000009 R09: 0000000000000000 [ 938.749848] R10: 00007fa8ba3769d0 R11: 0000000000000293 R12: 00007fa8ba375a40 [ 938.749848] R13: 00000000004cd338 R14: 00000000004db1a0 R15: 00000000ffffffff [ 938.749848] Kernel Offset: disabled [ 938.749848] Rebooting in 86400 seconds..