[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.916794][ T25] audit: type=1800 audit(1572279585.630:25): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 36.936710][ T25] audit: type=1800 audit(1572279585.630:26): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 36.974607][ T25] audit: type=1800 audit(1572279585.630:27): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.48' (ECDSA) to the list of known hosts. 2019/10/28 16:19:55 fuzzer started 2019/10/28 16:19:57 dialing manager at 10.128.0.105:45117 2019/10/28 16:19:58 syscalls: 2540 2019/10/28 16:19:58 code coverage: enabled 2019/10/28 16:19:58 comparison tracing: enabled 2019/10/28 16:19:58 extra coverage: extra coverage is not supported by the kernel 2019/10/28 16:19:58 setuid sandbox: enabled 2019/10/28 16:19:58 namespace sandbox: enabled 2019/10/28 16:19:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/28 16:19:58 fault injection: enabled 2019/10/28 16:19:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/28 16:19:58 net packet injection: enabled 2019/10/28 16:19:58 net device setup: enabled 2019/10/28 16:19:58 concurrency sanitizer: enabled syzkaller login: [ 53.003123][ T7295] KCSAN: could not find function: 'poll_schedule_timeout' 2019/10/28 16:20:04 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'tick_sched_do_timer' 'ep_poll' 'ktime_get_real_seconds' 'ext4_free_inode' 'ext4_free_inodes_count' 'ext4_nonda_switch' 'pid_update_inode' 'rcu_gp_fqs_loop' '__tcp_select_window' 'echo_char' 'task_dump_owner' 'do_syslog' 'do_nanosleep' 'tcp_poll' 'poll_schedule_timeout' 'blk_mq_sched_dispatch_requests' '__nf_conntrack_find_get' 'tomoyo_supervisor' 'tick_do_update_jiffies64' 'tcp_add_backlog' '__nf_ct_refresh_acct' 'find_next_bit' 'run_timer_softirq' 'mod_timer' 16:20:11 executing program 0: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 63.276927][ T7299] IPVS: ftp: loaded support on port[0] = 21 16:20:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff020}, {0x80000006}]}, 0x10) [ 63.370603][ T7299] chnl_net:caif_netlink_parms(): no params data found [ 63.449230][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.465375][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.485320][ T7299] device bridge_slave_0 entered promiscuous mode [ 63.493020][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.504173][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.512836][ T7299] device bridge_slave_1 entered promiscuous mode [ 63.535876][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.547923][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.589423][ T7299] team0: Port device team_slave_0 added [ 63.604917][ T7299] team0: Port device team_slave_1 added 16:20:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) [ 63.699390][ T7299] device hsr_slave_0 entered promiscuous mode [ 63.776572][ T7299] device hsr_slave_1 entered promiscuous mode [ 63.859575][ T7302] IPVS: ftp: loaded support on port[0] = 21 [ 63.940990][ T7304] IPVS: ftp: loaded support on port[0] = 21 [ 63.991780][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.998919][ T7299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.006322][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.013396][ T7299] bridge0: port 1(bridge_slave_0) entered forwarding state 16:20:12 executing program 3: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) [ 64.280491][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.392348][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.409683][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.426738][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.457651][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.497999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 64.597800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.607851][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.637142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.644309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.696074][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.707431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.736182][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.743275][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.795989][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.852645][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.878232][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.896230][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.926281][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.956910][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.986389][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.015998][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.051348][ T7299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.054922][ T7332] IPVS: ftp: loaded support on port[0] = 21 [ 65.086554][ T7299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:20:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x1002, 0x4, 0x1}, 0x3c) [ 65.115062][ T7302] chnl_net:caif_netlink_parms(): no params data found [ 65.140585][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.157424][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.185390][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.266932][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.317196][ T7304] chnl_net:caif_netlink_parms(): no params data found [ 65.546082][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.553777][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.597492][ T7302] device bridge_slave_0 entered promiscuous mode [ 65.629798][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.637648][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.676183][ T7304] device bridge_slave_0 entered promiscuous mode [ 65.735717][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.755312][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.763309][ T7302] device bridge_slave_1 entered promiscuous mode [ 65.813287][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.825258][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.833333][ T7304] device bridge_slave_1 entered promiscuous mode [ 65.949101][ C0] hrtimer: interrupt took 45887 ns [ 66.174700][ T7339] IPVS: ftp: loaded support on port[0] = 21 [ 66.221281][ T7332] chnl_net:caif_netlink_parms(): no params data found [ 66.270154][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.292989][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 16:20:15 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 66.356211][ T7302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.423043][ T7304] team0: Port device team_slave_0 added [ 66.434905][ T7302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.473349][ T7304] team0: Port device team_slave_1 added [ 66.563865][ T7302] team0: Port device team_slave_0 added [ 66.581138][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.588711][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.597035][ T7332] device bridge_slave_0 entered promiscuous mode 16:20:15 executing program 0: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 66.621754][ T7355] IPVS: ftp: loaded support on port[0] = 21 [ 66.627024][ T7302] team0: Port device team_slave_1 added [ 66.645139][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.652507][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.660960][ T7332] device bridge_slave_1 entered promiscuous mode [ 66.728503][ T7304] device hsr_slave_0 entered promiscuous mode [ 66.755634][ T7304] device hsr_slave_1 entered promiscuous mode [ 66.795824][ T7304] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.961489][ T7302] device hsr_slave_0 entered promiscuous mode [ 67.019029][ T7302] device hsr_slave_1 entered promiscuous mode [ 67.075290][ T7302] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.139029][ T7332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 16:20:15 executing program 0: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 67.201860][ T7332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.262755][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 67.501618][ T7332] team0: Port device team_slave_0 added [ 67.521436][ T7332] team0: Port device team_slave_1 added [ 67.774352][ T7332] device hsr_slave_0 entered promiscuous mode [ 67.859188][ T7332] device hsr_slave_1 entered promiscuous mode [ 67.925737][ T7332] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.951138][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.039444][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.055305][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.096131][ T7339] device bridge_slave_0 entered promiscuous mode [ 68.136443][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.143531][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.206445][ T7339] device bridge_slave_1 entered promiscuous mode [ 68.293603][ T7304] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.329407][ T7355] chnl_net:caif_netlink_parms(): no params data found [ 68.406155][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.439885][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.606524][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.645457][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.653979][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.661146][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.818837][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.896012][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.005730][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.012818][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.085988][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.135576][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.206665][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.276070][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.287203][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.322950][ T7302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.371583][ T7304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.455425][ T7304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.528262][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.607821][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.626738][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.637252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.706036][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.775442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.845761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.910808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.950625][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.021374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.138719][ T7302] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.189400][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.215995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.223990][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.271039][ T7339] team0: Port device team_slave_0 added [ 70.292304][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.335452][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.366408][ T7355] device bridge_slave_0 entered promiscuous mode [ 70.432947][ T7339] team0: Port device team_slave_1 added [ 70.445864][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.455829][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.486195][ T7355] device bridge_slave_1 entered promiscuous mode [ 70.508380][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.526078][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.565589][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.572679][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.606043][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.614955][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.665812][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.672970][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state 16:20:19 executing program 0: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 70.725151][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.756909][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.834261][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.990483][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.017024][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.089690][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.146779][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.210075][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.320942][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.418806][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.466559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.475176][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.543777][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.606119][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.675845][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.735485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 71.741463][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 71.748432][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.805836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.813055][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.906586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.967840][ T7355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.058490][ T7339] device hsr_slave_0 entered promiscuous mode [ 72.135773][ T7339] device hsr_slave_1 entered promiscuous mode [ 72.175308][ T7339] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.217869][ T7302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.283214][ T7302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.348378][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.386072][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.394670][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.506278][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.585878][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.592967][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.676040][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.725837][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.736760][ T7355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.867093][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.895684][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.904825][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.986100][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.036656][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.086234][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.107662][ T7332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.160762][ T7332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.258039][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.276353][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.285092][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.381453][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.426723][ T7355] team0: Port device team_slave_0 added [ 73.439150][ T7355] team0: Port device team_slave_1 added [ 73.449753][ T7302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.688440][ T7355] device hsr_slave_0 entered promiscuous mode [ 73.755708][ T7355] device hsr_slave_1 entered promiscuous mode [ 73.785424][ T7355] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.908114][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.979340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.016080][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.026227][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.102439][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.118743][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.186085][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.193192][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.311857][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.370411][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.410407][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.417531][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.446024][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.541803][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.606194][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.614375][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.656779][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.706194][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.762895][ T7339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.819619][ T7339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.916869][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.930780][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.986239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.039690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.081009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 16:20:23 executing program 0: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 75.126247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.185762][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.261702][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.270929][ T7520] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.315893][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.324225][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.345575][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 75.351378][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 75.396461][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.412786][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.575545][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 75.581379][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:20:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff020}, {0x80000006}]}, 0x10) 16:20:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) [ 75.715398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.735480][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 75.741311][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 75.755755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.789253][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.796428][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.857600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.895462][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 75.901308][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 75.928798][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.000330][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.008237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.086288][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.140680][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.192817][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.248486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.333689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.394668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.455680][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.496714][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.547635][ T7355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.603775][ T7355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.698741][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.732471][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.791134][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 16:20:25 executing program 3: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) [ 76.847644][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.043693][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 16:20:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x1002, 0x4, 0x1}, 0x3c) 16:20:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) 16:20:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff020}, {0x80000006}]}, 0x10) 16:20:26 executing program 0: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 78.024662][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 78.024696][ T25] audit: type=1804 audit(1572279626.730:31): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/0/bus" dev="sda1" ino=16553 res=1 [ 78.291327][ T25] audit: type=1804 audit(1572279626.770:32): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/0/bus" dev="sda1" ino=16553 res=1 [ 78.437927][ T25] audit: type=1804 audit(1572279626.780:33): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/0/bus" dev="sda1" ino=16553 res=1 16:20:27 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x1002, 0x4, 0x1}, 0x3c) 16:20:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff020}, {0x80000006}]}, 0x10) 16:20:27 executing program 3: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) [ 78.615312][ C0] net_ratelimit: 2 callbacks suppressed [ 78.615326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 78.626731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 78.951981][ T25] audit: type=1804 audit(1572279627.660:34): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/1/bus" dev="sda1" ino=16559 res=1 16:20:27 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x1002, 0x4, 0x1}, 0x3c) [ 79.049375][ T25] audit: type=1804 audit(1572279627.700:35): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/1/bus" dev="sda1" ino=16559 res=1 16:20:27 executing program 0: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:27 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) [ 79.387357][ T25] audit: type=1804 audit(1572279628.090:36): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir287263085/syzkaller.V3kAjZ/4/bus" dev="sda1" ino=16555 res=1 [ 79.555367][ T25] audit: type=1804 audit(1572279628.100:37): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir287263085/syzkaller.V3kAjZ/4/bus" dev="sda1" ino=16555 res=1 [ 79.613198][ T25] audit: type=1804 audit(1572279628.320:38): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/2/bus" dev="sda1" ino=16559 res=1 [ 79.788264][ T25] audit: type=1804 audit(1572279628.500:39): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/2/bus" dev="sda1" ino=16559 res=1 16:20:28 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 79.902180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 79.908391][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 79.918720][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 79.924701][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:20:28 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 80.065297][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 80.071165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 80.103576][ T25] audit: type=1804 audit(1572279628.800:40): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/4/bus" dev="sda1" ino=16535 res=1 16:20:29 executing program 0: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:29 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:29 executing program 3: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) 16:20:29 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:29 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:29 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:29 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:30 executing program 3: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:30 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:30 executing program 1: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) 16:20:30 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:30 executing program 0: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:31 executing program 0: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:31 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:31 executing program 3: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:31 executing program 1: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) 16:20:31 executing program 4: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) [ 83.107318][ T25] kauditd_printk_skb: 26 callbacks suppressed [ 83.107352][ T25] audit: type=1804 audit(1572279631.820:67): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir695483467/syzkaller.koJyaT/5/bus" dev="sda1" ino=16571 res=1 16:20:32 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 83.261702][ T25] audit: type=1804 audit(1572279631.870:68): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir695483467/syzkaller.koJyaT/5/bus" dev="sda1" ino=16571 res=1 16:20:32 executing program 3: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 83.689713][ T25] audit: type=1804 audit(1572279632.400:69): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/6/bus" dev="sda1" ino=16565 res=1 [ 83.789307][ T25] audit: type=1804 audit(1572279632.430:70): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/6/bus" dev="sda1" ino=16565 res=1 16:20:32 executing program 1: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) 16:20:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) [ 83.935386][ T25] audit: type=1804 audit(1572279632.430:71): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir187202626/syzkaller.iwbmZ6/6/bus" dev="sda1" ino=16565 res=1 16:20:32 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:20:32 executing program 4: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) [ 84.095312][ T25] audit: type=1804 audit(1572279632.630:72): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir695483467/syzkaller.koJyaT/6/bus" dev="sda1" ino=16571 res=1 16:20:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) [ 84.289732][ T25] audit: type=1804 audit(1572279632.630:73): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir695483467/syzkaller.koJyaT/6/bus" dev="sda1" ino=16571 res=1 16:20:33 executing program 5: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 84.584220][ T25] audit: type=1804 audit(1572279633.190:74): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir585963866/syzkaller.vOyqxl/6/bus" dev="sda1" ino=16560 res=1 [ 84.789112][ T25] audit: type=1804 audit(1572279633.220:75): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir585963866/syzkaller.vOyqxl/6/bus" dev="sda1" ino=16560 res=1 [ 84.855829][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 84.861998][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:20:33 executing program 1: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:33 executing program 5: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:34 executing program 2: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 85.335478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 85.341312][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 85.571067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 85.577427][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:20:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) 16:20:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) 16:20:34 executing program 4: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x351, 0x0) 16:20:34 executing program 5: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:34 executing program 1: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:34 executing program 2: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 86.295632][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 86.301821][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:20:35 executing program 5: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:35 executing program 1: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:35 executing program 2: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:35 executing program 4: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) 16:20:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4020ae46, &(0x7f0000000180)) 16:20:35 executing program 5: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) [ 87.415321][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 87.421189][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:20:36 executing program 1: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:36 executing program 5: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:36 executing program 4: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f00000001c0)=""/229, 0x32, 0xe5, 0x1}, 0x20) 16:20:36 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:37 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f00000001c0)=""/229, 0x32, 0xe5, 0x1}, 0x20) 16:20:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:37 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f00000001c0)=""/229, 0x32, 0xe5, 0x1}, 0x20) 16:20:37 executing program 1: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:37 executing program 4: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:38 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f00000001c0)=""/229, 0x32, 0xe5, 0x1}, 0x20) 16:20:38 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:38 executing program 1: fanotify_init(0x5e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, @rand_addr="2559dcad50f19d4a37656e83351f8975", @loopback, 0xfff, 0x7, 0xff, 0x0, 0x2, 0xe5874e52c777ad20}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000140)='#nodev\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 16:20:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:38 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:38 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:38 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:39 executing program 5: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:39 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:40 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:40 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:40 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:40 executing program 5: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:40 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:41 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:41 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:41 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:42 executing program 5: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r6, r7, 0x0, 0x2000005) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 16:20:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:42 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013003586efffff020000800007000000", @ANYRES32=r1, @ANYBLOB="00000c001a000867020034bf18da41731ecb0000"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 16:20:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:42 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000825000)=@ipv6_delroute={0x30, 0x19, 0x111, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14}]}, 0x30}}, 0x0) [ 94.217402][ T7992] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:20:43 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013003586efffff020000800007000000", @ANYRES32=r1, @ANYBLOB="00000c001a000867020034bf18da41731ecb0000"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 16:20:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 16:20:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:43 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000825000)=@ipv6_delroute={0x30, 0x19, 0x111, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14}]}, 0x30}}, 0x0) 16:20:43 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013003586efffff020000800007000000", @ANYRES32=r1, @ANYBLOB="00000c001a000867020034bf18da41731ecb0000"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 16:20:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:43 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000825000)=@ipv6_delroute={0x30, 0x19, 0x111, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14}]}, 0x30}}, 0x0) 16:20:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 95.400786][ T8037] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:20:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013003586efffff020000800007000000", @ANYRES32=r1, @ANYBLOB="00000c001a000867020034bf18da41731ecb0000"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 16:20:44 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000825000)=@ipv6_delroute={0x30, 0x19, 0x111, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14}]}, 0x30}}, 0x0) [ 95.657608][ T25] audit: type=1800 audit(1572279644.370:76): pid=8013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="hugetlb.2MB.e_in_bytes" dev="sda1" ino=16592 res=0 16:20:44 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:44 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:45 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:45 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:46 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:46 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:46 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:47 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:47 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:47 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:48 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:49 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) syz_open_dev$ndb(0x0, 0x0, 0x200000) 16:20:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) [ 100.980754][ T8215] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.180678][ T8219] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:20:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) [ 101.878723][ T8235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:20:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="9b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) [ 103.884152][ T8296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:20:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x2400871c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 16:20:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x2400871c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 16:20:54 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:20:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:55 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:20:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x2400871c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 16:20:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:55 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:20:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x2400871c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 16:20:55 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:20:55 executing program 2: socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 16:20:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) 16:20:56 executing program 5: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') 16:20:56 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 16:20:56 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:20:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) io_setup(0x8, 0x0) [ 107.975809][ T25] audit: type=1804 audit(1572279656.690:77): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/29/file0/bus" dev="ramfs" ino=31790 res=1 [ 108.114233][ T25] audit: type=1804 audit(1572279656.720:78): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/29/file0/bus" dev="ramfs" ino=31790 res=1 16:20:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x4021, [0xa003000000000000, 0xc0020000, 0x0, 0x0, 0x0, 0x0, 0x380]}, 0x3c) [ 108.249900][ T25] audit: type=1804 audit(1572279656.800:79): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/29/file0/file0/bus" dev="ramfs" ino=31792 res=1 16:20:57 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 16:20:57 executing program 2: socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 16:20:57 executing program 5: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') 16:20:57 executing program 1: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') [ 109.418019][ T25] audit: type=1804 audit(1572279658.130:80): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/30/file0/bus" dev="ramfs" ino=31108 res=1 [ 109.535193][ T25] audit: type=1804 audit(1572279658.160:81): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/30/file0/bus" dev="ramfs" ino=31108 res=1 16:20:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:20:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x4021, [0xa003000000000000, 0xc0020000, 0x0, 0x0, 0x0, 0x0, 0x380]}, 0x3c) 16:20:58 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 16:20:58 executing program 2: socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) [ 110.067551][ T25] audit: type=1804 audit(1572279658.780:82): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/31/file0/bus" dev="ramfs" ino=31885 res=1 [ 110.189293][ T25] audit: type=1804 audit(1572279658.830:83): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/31/file0/bus" dev="ramfs" ino=31885 res=1 16:20:58 executing program 5: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') 16:20:59 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 16:20:59 executing program 1: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') 16:20:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:20:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x4021, [0xa003000000000000, 0xc0020000, 0x0, 0x0, 0x0, 0x0, 0x380]}, 0x3c) [ 110.958108][ T25] audit: type=1804 audit(1572279659.670:84): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir478421173/syzkaller.B3hzs1/32/file0/bus" dev="ramfs" ino=31160 res=1 16:20:59 executing program 2: socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 16:20:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x4021, [0xa003000000000000, 0xc0020000, 0x0, 0x0, 0x0, 0x0, 0x380]}, 0x3c) 16:21:00 executing program 5: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') 16:21:00 executing program 1: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') 16:21:01 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x4021, [0xa003000000000000, 0xc0020000, 0x0, 0x0, 0x0, 0x0, 0x380]}, 0x3c) 16:21:01 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x4021, [0xa003000000000000, 0xc0020000, 0x0, 0x0, 0x0, 0x0, 0x380]}, 0x3c) 16:21:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x4021, [0xa003000000000000, 0xc0020000, 0x0, 0x0, 0x0, 0x0, 0x380]}, 0x3c) 16:21:03 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:03 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:03 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:03 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:03 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:04 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:04 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:04 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:04 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:04 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:05 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:05 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:05 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:05 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:05 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:05 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:06 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:06 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:06 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:07 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:07 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:08 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:08 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:08 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:08 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:08 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:09 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:09 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:09 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:09 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:09 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:10 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:10 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:10 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:10 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:11 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:11 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:11 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:11 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:12 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:12 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:13 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:13 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:13 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:13 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="909e00000100f6f1630a048d188102e21f2147db3d48c2fb65621951779dd5613de09681e5fcc857d2f1fd56095329c7b562078d1d181426cfb0ac5e22eaa356f2f201b9c1abf2f31a016bfe621a7b0e82ee497ff00ad79e9277db4bec7381268e617ed4110590f482433314fe96a4197458c80cca60d5ac6c1f8f44e2853063c0e9a4be36edfb481cb3381fede0ec539ac3153e356a747e27d2a3307a35a196c049186c3f0d34d645288d2bdf9f661fb83e5365708f05873d970641cef5cd495d92cf02000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r15, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0)=0x11) r16 = syz_open_pts(r15, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64=r17, @ANYBLOB="0300000001000000000000000100000000000000e604000000000000100000000100000076657468315f746f5f6272696467650002000000000000000200000000000000cb0b000000000000ff0700000000000001040000faffffff00000000000000000100000000000000000000000000000008000000000000000500"/138, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff03000002000000000000000000000000000000070000000000000000000000ff000000020000000000000000000000000000000900000000000000000200000000000096010000cf00000003000000000000000300000000000000000000000000000007000000000000000080000000000000ff000000000000000700000006000000010000003f000000ff030000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="ff7f0000050000000000000000000000000000001f0000000000000004000000010000006574683100000000787e6c4f00000000000000000000000000000000000000000000000000000000cdd300000500000005000000000000007f0000000000000002000000000000006b2800000000000001000000010000002600000000000000060000002bba00003f000000ff01000006000000", @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="8300000005000000000000000000000000000000000000000000000000000000000800000100000000000000030000000000000003000000000000000300000000000000010001000000000006000000000000002a440000000000000000000000000000030000000000000009000000000000000104000000000000790b0000030000000500000000000000810000", @ANYRES32, @ANYBLOB="02000000cd82000000000000000000000000000000fcffffffffffff08000000f8ffffff2f6c6f6e6f64657600000000000000000200"/76, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r16, @ANYRESHEX], @ANYRES32=0x0, @ANYRESDEC], 0x2dd) r18 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r18, &(0x7f0000000280), 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 16:21:13 executing program 2: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') [ 125.404430][ T7265] ================================================================== [ 125.412579][ T7265] BUG: KCSAN: data-race in generic_permission / kernfs_refresh_inode [ 125.420635][ T7265] [ 125.422967][ T7265] write to 0xffff888125d7c920 of 2 bytes by task 7266 on cpu 1: [ 125.430595][ T7265] kernfs_refresh_inode+0x42/0x140 [ 125.435707][ T7265] kernfs_iop_permission+0x66/0xa0 [ 125.440824][ T7265] inode_permission+0x241/0x3c0 [ 125.445676][ T7265] link_path_walk.part.0+0x622/0xa90 [ 125.450961][ T7265] path_lookupat.isra.0+0x77/0x5a0 [ 125.456071][ T7265] filename_lookup+0x145/0x2b0 [ 125.460843][ T7265] user_path_at_empty+0x4c/0x70 [ 125.465690][ T7265] vfs_statx+0xd9/0x190 [ 125.469844][ T7265] __do_sys_newstat+0x51/0xb0 [ 125.474541][ T7265] __x64_sys_newstat+0x3a/0x50 [ 125.479303][ T7265] do_syscall_64+0xcc/0x370 [ 125.483809][ T7265] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 125.489689][ T7265] [ 125.492020][ T7265] read to 0xffff888125d7c920 of 2 bytes by task 7265 on cpu 0: [ 125.499563][ T7265] generic_permission+0x36/0x3d0 [ 125.504497][ T7265] kernfs_iop_permission+0x7d/0xa0 [ 125.509610][ T7265] inode_permission+0x241/0x3c0 [ 125.514578][ T7265] link_path_walk.part.0+0x622/0xa90 [ 125.519868][ T7265] path_openat+0x14f/0x36e0 [ 125.524388][ T7265] do_filp_open+0x11e/0x1b0 [ 125.528897][ T7265] do_sys_open+0x3b3/0x4f0 [ 125.533311][ T7265] __x64_sys_open+0x55/0x70 [ 125.537841][ T7265] do_syscall_64+0xcc/0x370 [ 125.542349][ T7265] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 125.548232][ T7265] [ 125.550561][ T7265] Reported by Kernel Concurrency Sanitizer on: [ 125.556715][ T7265] CPU: 0 PID: 7265 Comm: udevd Not tainted 5.4.0-rc3+ #0 [ 125.563726][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.573778][ T7265] ================================================================== [ 125.581834][ T7265] Kernel panic - not syncing: panic_on_warn set ... [ 125.588418][ T7265] CPU: 0 PID: 7265 Comm: udevd Not tainted 5.4.0-rc3+ #0 [ 125.595429][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.605482][ T7265] Call Trace: [ 125.608782][ T7265] dump_stack+0xf5/0x159 [ 125.613025][ T7265] panic+0x210/0x640 [ 125.616925][ T7265] ? do_syscall_64+0xcc/0x370 [ 125.621611][ T7265] ? vprintk_func+0x8d/0x140 [ 125.626210][ T7265] kcsan_report.cold+0xc/0x10 [ 125.630899][ T7265] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 125.636453][ T7265] __tsan_read2+0x2c/0x30 [ 125.640789][ T7265] generic_permission+0x36/0x3d0 [ 125.645734][ T7265] kernfs_iop_permission+0x7d/0xa0 [ 125.650844][ T7265] ? kernfs_iop_getattr+0x90/0x90 [ 125.655865][ T7265] inode_permission+0x241/0x3c0 [ 125.660716][ T7265] link_path_walk.part.0+0x622/0xa90 [ 125.666014][ T7265] path_openat+0x14f/0x36e0 [ 125.670515][ T7265] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 125.676151][ T7265] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 125.681787][ T7265] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 125.687432][ T7265] ? __d_free_external+0x60/0x60 [ 125.692369][ T7265] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 125.698026][ T7265] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 125.703666][ T7265] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 125.709573][ T7265] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 125.715220][ T7265] do_filp_open+0x11e/0x1b0 [ 125.719737][ T7265] ? __alloc_fd+0x316/0x4c0 [ 125.724247][ T7265] do_sys_open+0x3b3/0x4f0 [ 125.728683][ T7265] __x64_sys_open+0x55/0x70 [ 125.733194][ T7265] do_syscall_64+0xcc/0x370 [ 125.737700][ T7265] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 125.743585][ T7265] RIP: 0033:0x7f8e7ff70120 [ 125.748005][ T7265] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 125.767608][ T7265] RSP: 002b:00007ffc580f9708 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 125.776030][ T7265] RAX: ffffffffffffffda RBX: 0000000001266090 RCX: 00007f8e7ff70120 [ 125.784007][ T7265] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffc580f97e0 [ 125.791999][ T7265] RBP: 00007ffc580f9780 R08: 0000000000000008 R09: 0000000000000001 [ 125.799977][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 125.807949][ T7265] R13: 000000000041f57a R14: 0000000000000000 R15: 000000000000000b [ 125.817444][ T7265] Kernel Offset: disabled [ 125.821768][ T7265] Rebooting in 86400 seconds..