dup(r4) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x0) write$uinput_user_dev(r9, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) accept4$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x800) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:26:23 executing program 4: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200005) sendfile(r3, r4, 0x0, 0x8000ffffffff) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x3]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000040)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r10, 0x40}, {r11}, {r10, 0x2070}, {r12, 0x1}, {r10}, {r10, 0x1000}, {r13, 0x19}, {r14, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r15 = dup(r10) ioctl$UI_SET_SWBIT(r15, 0x4004556d, 0x0) write$uinput_user_dev(r15, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffe], [0x2, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1b2f9b6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r16, r15, 0x0, 0xfffffffffffffffc) lseek(r2, 0x0, 0x3) 18:26:23 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0xc0800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfffffffffffffe0c) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x2a2, 0x10400003) 18:26:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r3, 0x40}, {r4}, {r3, 0x2070}, {r5, 0x1}, {r3}, {r3, 0x1000}, {r6, 0x19}, {r7, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r8 = dup(r3) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x0) write$uinput_user_dev(r8, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) write$FUSE_STATFS(r8, &(0x7f0000000000)={0x60, 0x0, 0x7, {{0x8001, 0x7, 0x81, 0x7fff, 0x2, 0xbd7f, 0x2, 0x77a5ce78}}}, 0x60) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) r10 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8000fffffffe) 18:26:24 executing program 4: r0 = gettid() sched_setparam(r0, &(0x7f0000000040)=0x26) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/netstat\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000040, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000040, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 18:26:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r3, 0x40}, {r4}, {r3, 0x2070}, {r5, 0x1}, {r3}, {r3, 0x1000}, {r6, 0x19}, {r7, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r8 = dup(r3) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x0) write$uinput_user_dev(r8, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) write$FUSE_STATFS(r8, &(0x7f0000000000)={0x60, 0x0, 0x7, {{0x8001, 0x7, 0x81, 0x7fff, 0x2, 0xbd7f, 0x2, 0x77a5ce78}}}, 0x60) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) r10 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8000fffffffe) 18:26:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r11, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000000022"], 0x1}}, 0x0) 18:26:25 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x2) ftruncate(r0, 0x2081fc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000000040)) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r7, 0x40}, {r8}, {r7, 0x2070}, {r9, 0x1}, {r7}, {r7, 0x1000}, {r10, 0x19}, {r11, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) ppoll(&(0x7f0000000080)=[{r2, 0x140}, {r5}, {r2, 0x206a}, {r11, 0x1}, {r2}, {r2, 0x1000}, {r5, 0x119}, {r6, 0x1020}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) setsockopt$sock_void(r6, 0x1, 0x1b, 0x0, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r15, 0x800454cf, &(0x7f0000000040)) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r12, 0x40}, {r13}, {r12, 0x2070}, {r14, 0x1}, {r12}, {r12, 0x1000}, {r15, 0x19}, {r16, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r12) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) sync_file_range(r12, 0x5, 0x40, 0x4) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r17, 0x400454ca, &(0x7f0000000040)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff}) r18 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r18, 0x0, 0x8000fffffff7) 18:26:25 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) socket(0xa, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) dup2(r1, 0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'bpq0\x00\x00\x00\x00\x00\x00\x06W\x00', 0x21}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000fdbff8)=[{&(0x7f00000025c0)="290000002100190000003fffffffda260200000000e80001040000040d00140000000000132eb75c35", 0x40d}], 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="24fdff02e654b559533e1b3b08bb970be182f9ebb20a52943a0d8e40f599dce87c7e15d3f928270895d221725fa7c3762b6a89896d1a7c0dff7faa9c25ebc50637447bc7583afc448d2e1991b249bb5e175ffdb6dce98aa883247529d0dc2a60d67f8d70e70d3a59cb64bd5cdc3a5705cc00000000520cf73e8ae944ac46c87191447745d4dd98edb7948a66ec0eb7e2c236a186429fd195f31a4d6fe332866e9e02510a9a8a2ecc288bc37ea968441181d966fafdf6ca805248ac4d31fd1b7146aad3ae", @ANYRES16=r6, @ANYBLOB="0c002cbd7000fddbdf25010000000000000001410000001800170000000d000080017564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x68, r6, 0x10, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xfffffffe, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4475c0731fdea740) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 18:26:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r3, 0x40}, {r4}, {r3, 0x2070}, {r5, 0x1}, {r3}, {r3, 0x1000}, {r6, 0x19}, {r7, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r8 = dup(r3) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x0) write$uinput_user_dev(r8, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) write$FUSE_STATFS(r8, &(0x7f0000000000)={0x60, 0x0, 0x7, {{0x8001, 0x7, 0x81, 0x7fff, 0x2, 0xbd7f, 0x2, 0x77a5ce78}}}, 0x60) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) r10 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8000fffffffe) 18:26:25 executing program 5: syz_genetlink_get_family_id$tipc2(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/55) fchdir(r0) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x3) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r7 = getegid() syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000780), 0x0, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x10000000, 0x1fffff}, 0xc) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000a40)=ANY=[]) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000140)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000680)={0x1}) dup3(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x1, 0x80010, r9, 0x0) write$P9_RATTACH(r8, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x80}}, 0x14) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000bcefe4)={0xa, 0x4e24, 0x0, @rand_addr, 0x27}, 0x1c) setregid(r6, r7) [ 240.621190] input: syz1 as /devices/virtual/input/input237 [ 240.705714] input: syz1 as /devices/virtual/input/input239 [ 240.747902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21734 sclass=netlink_route_socket 18:26:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r11, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000000022"], 0x1}}, 0x0) [ 241.228563] input: syz1 as /devices/virtual/input/input243 18:26:25 executing program 2: open(0x0, 0x1, 0x12) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000380)={0x4, 0x0, 0x3, 0x0, 0xea, "f1a2c58cac7b90f916d7f28de792593063c5dd", 0x800, 0x20}) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r5, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000480)={'syz'}) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) timerfd_gettime(r3, &(0x7f0000000100)) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000300), 0x3) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x22a) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x37, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r8 = dup(r7) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000600)=ANY=[@ANYBLOB="e07d2ccbc9a4f0b23c9fda78c06b9c329a48c9c459c4c89f8a9052d971063753bcbce6ec962ca2cf722e6493a8044703ba0a2328874b8d1a8ff47444f5f95d619edb5d579e0000000000000000000000009e68edc41c5f34a6ba829ba9e5162a9e9303a1c24055426427ce8c75a383ca8042bfb88dc59bbca47258a7b216bdbae1d1064f837adfed905454c3d7d001d6fec4e887"], 0x1) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 18:26:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffffffffffd, 0x2ffffffff}, 0xb) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000700)}) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe(0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x9}}, 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x60ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x5) r3 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r4, 0x20080000) keyctl$revoke(0x3, r4) request_key(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, r4) add_key(0x0, &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000003c0)='\x05\xd2\x19Ld+B5', &(0x7f0000000800)={'Sy{', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r5 = request_key(&(0x7f0000000300)='\xd1\xb7S\xd8\x00', &(0x7f0000000880)={'\x00\xea6', 0x1}, &(0x7f0000000840)='IPVS\x00\x1f\x808c\x9e\xe7\x14\xcd\xff\xa6*\xce\x05\x15\xf0K\x8a\x998\x82\x0e\"eQ\xe6~2\xdcv\t\xbb\x1ao\xe3\x90Z\xab\x1e\xc8', 0x0) keyctl$set_timeout(0xf, r5, 0x6) io_submit(0x0, 0x0, &(0x7f0000001b80)) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) fstat(r6, &(0x7f0000000600)) inotify_init1(0x80000) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x400) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = syz_open_procfs(r7, 0x0) finit_module(r8, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1d1200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, r9, r9, 0xee01]) socket(0x0, 0x2, 0xe3) r10 = socket$inet6(0xa, 0x400000000001, 0x0) close(r10) r11 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x200005) sendfile(r10, r11, 0x0, 0x8000ffffffff) getsockname(r10, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r12, &(0x7f0000000740)={0x10002000400b}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 18:26:26 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r0, 0x40}, {r1}, {r0, 0x2070}, {r2, 0x1}, {r0}, {r0, 0x1000}, {r3, 0x19}, {r4, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r5 = dup(r0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x0) write$uinput_user_dev(r5, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$TIOCCONS(r5, 0x541d) prctl$PR_GET_DUMPABLE(0x3) 18:26:26 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba4]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x3) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r3, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) fsetxattr$security_ima(r3, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="fbe8b28775dc0cf967d23ac8de2b7751e301cbf85138ffde648fc2f56002a74386b77fe5ec0e6656483ee268eb4c9b1bc0497500a4fea7fd60001128d887ebc9ce3ba0840c741232ad1b19e7f59466544ee883f32b3af0ce4d17289baec55fda74365e5c91085777a39a39f90a889d81b7256c0b0f8f498e05a3197e8f8489ca12f5321f253ffcec0cc3c22af83ebcdfbab1b860c5165ed378b7221d4b07b12f6a14b54f6855f949de231f3e6dcf1c4599e44a9c"], 0x1, 0x1) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r5 = getpid() r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1b, 0x18, 0x9, 0x7, 0xcb, "7cc5b7207591a62d2ed55687f5aaef17840b55a4a3a0e1a3d976adf0b7b77e823eb7f241e430a484355e66871209a060348086c2e2a94ba7d3a05c2e1be3da878de10fc678701af0789b34079cf8d2571376b2d00380c20bb03c8a32b1730d49e205318a7dd04cbc804eb56208422a00a20a1fa3956b1c19cceca88d10249fbbc3018926b10ef32e6ddf3c182fbd0b2ca7f0a1c73143fdc266b83b0d45f2de150a4032f586ef4f9df282da50f59263f73335cb492f4aefe06da4bac49c8323aa82682318ac57a4ab38c59f"}]}, 0xe8}}, 0x0) prlimit64(r5, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r1, 0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(r7, &(0x7f0000000580), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r5, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)) [ 241.420769] input: syz1 as /devices/virtual/input/input245 18:26:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f000072eff0)=[{&(0x7f0000000080)="480000001500257f09004b01fcfc8c860a0600000017e006000a2b61d2a1f25b15147344d739b3f9f600e30900000000000000000000ffff5bf109000000ed5e0000008e0d861500", 0x48}], 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r5, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r6 = dup(r1) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) write$uinput_user_dev(r6, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a40000006431bb115400e2a6b53ef02f268343bbf465431b32758bebd21a409115a4eb00406052468d71c2f40e96004ad5851fb8d53c9b2300715b44cadd33a25cb2854ad4698920144e0b3fb9300c3f4d7f3b2c71dd8da4f12ceb91770f2f450415794464de27879b28030943396a345ceb8e5f0e37d3f5e83c0c14d8f9fb3037a934f76c1f860ee50117f058017bafc9a78f1bd493848d8b0bd53844fed5085018eaae4b5097", @ANYRES16=r7, @ANYBLOB="000327bd7000fddbdf25150000005c0007000c000400cf090000000000000c00030001000000000000000c00040000040000000000000c00040001000000010000000c00030000000000000000000c0004000010000000000000080002000500000008000100010100000c00090008000200010000003400070008000200020000000c0003000900000000000000080002007f0000000c000300ffffffffffffffff08000200020000001400020008000100030000000800010002000000180005001400020008000200fbffffff0800030000000000300007000c000400060000000000000008000100810000000c00030015f1ffffffffffff0c00040009000000000000002c0009000800020009000000080001000000000008000100a3f2ffff0800020007000000080001000600000014000900080002000080ffff0800020000000000"], 0x14c}}, 0xbdb73a3710045b99) [ 241.564228] input: syz1 as /devices/virtual/input/input246 18:26:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x60100, 0x0) write$smack_current(r4, &(0x7f0000000040), 0x15) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x600080, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x800, 0x0) fcntl$setstatus(r6, 0x4, 0xa400) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) r7 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8000fffffffe) 18:26:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r11, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000000022"], 0x1}}, 0x0) [ 241.967847] input: syz1 as /devices/virtual/input/input253 18:26:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r11, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000000022"], 0x1}}, 0x0) 18:26:27 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) getresuid(0x0, &(0x7f0000000180), 0x0) r1 = geteuid() r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r1, r2) r3 = geteuid() r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r3, r4) setreuid(r1, r3) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 242.318984] input: syz1 as /devices/virtual/input/input254 18:26:27 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x372, 0x2100, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}}, 0x40000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r7, r8, 0x0, 0x8000ffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000003c0)}, 0xffffff7d) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:27 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) getresuid(0x0, &(0x7f0000000180), 0x0) r1 = geteuid() r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r1, r2) r3 = geteuid() r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r3, r4) setreuid(r1, r3) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 242.490835] input: syz1 as /devices/virtual/input/input256 18:26:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000480)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 242.761406] input: syz1 as /devices/virtual/input/input257 [ 242.866672] input: syz1 as /devices/virtual/input/input258 18:26:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r11, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000480)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 18:26:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000480)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 243.451839] input: syz1 as /devices/virtual/input/input259 [ 243.452765] input: syz1 as /devices/virtual/input/input262 [ 243.477041] input: syz1 as /devices/virtual/input/input260 18:26:29 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba4]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x3) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r3, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) fsetxattr$security_ima(r3, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="fbe8b28775dc0cf967d23ac8de2b7751e301cbf85138ffde648fc2f56002a74386b77fe5ec0e6656483ee268eb4c9b1bc0497500a4fea7fd60001128d887ebc9ce3ba0840c741232ad1b19e7f59466544ee883f32b3af0ce4d17289baec55fda74365e5c91085777a39a39f90a889d81b7256c0b0f8f498e05a3197e8f8489ca12f5321f253ffcec0cc3c22af83ebcdfbab1b860c5165ed378b7221d4b07b12f6a14b54f6855f949de231f3e6dcf1c4599e44a9c"], 0x1, 0x1) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r5 = getpid() r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1b, 0x18, 0x9, 0x7, 0xcb, "7cc5b7207591a62d2ed55687f5aaef17840b55a4a3a0e1a3d976adf0b7b77e823eb7f241e430a484355e66871209a060348086c2e2a94ba7d3a05c2e1be3da878de10fc678701af0789b34079cf8d2571376b2d00380c20bb03c8a32b1730d49e205318a7dd04cbc804eb56208422a00a20a1fa3956b1c19cceca88d10249fbbc3018926b10ef32e6ddf3c182fbd0b2ca7f0a1c73143fdc266b83b0d45f2de150a4032f586ef4f9df282da50f59263f73335cb492f4aefe06da4bac49c8323aa82682318ac57a4ab38c59f"}]}, 0xe8}}, 0x0) prlimit64(r5, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r1, 0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(r7, &(0x7f0000000580), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r5, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)) 18:26:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffffffffffd, 0x2ffffffff}, 0xb) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000700)}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x9}}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x60ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000040), 0x5) r7 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x1000, &(0x7f0000000640)=0x0) r9 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r9, 0x20080000) keyctl$revoke(0x3, r9) request_key(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, r9) add_key(&(0x7f0000000680)='big_key\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, r9) add_key$keyring(&(0x7f00000003c0)='\x05\xd2\x19Ld+B5', &(0x7f0000000800)={'Sy{', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r10 = request_key(&(0x7f0000000300)='\xd1\xb7S\xd8\x00', &(0x7f0000000880)={'\x00\xea6', 0x1}, &(0x7f0000000840)='IPVS\x00\x1f\x808c\x9e\xe7\x14\xcd\xff\xa6*\xce\x05\x15\xf0K\x8a\x998\x82\x0e\"eQ\xe6~2\xdcv\t\xbb\x1ao\xe3\x90Z\xab\x1e\xc8', 0x0) keyctl$set_timeout(0xf, r10, 0x6) io_submit(r8, 0x1, &(0x7f0000001b80)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000b40), 0x0, 0x4, 0x0, 0x2, r5}]) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_init1(0x80000) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x400) r12 = fcntl$getown(0xffffffffffffffff, 0x9) r13 = syz_open_procfs(r12, 0x0) finit_module(r13, 0x0, 0x0) r14 = openat$tun(0xffffffffffffff9c, 0x0, 0x1d1200, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, 0x0) fstat(r14, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000400)=[r11, 0xffffffffffffffff, r15, 0xee01, r11]) socket(0x0, 0x2, 0xe3) r16 = socket$inet6(0xa, 0x400000000001, 0x0) close(r16) r17 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x200005) sendfile(r16, r17, 0x0, 0x8000ffffffff) getsockname(r16, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r18, &(0x7f0000000740)={0x10002000400b}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 18:26:29 executing program 2: open(0x0, 0x1, 0x12) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000380)={0x4, 0x0, 0x3, 0x0, 0xea, "f1a2c58cac7b90f916d7f28de792593063c5dd", 0x800, 0x20}) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r5, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000480)={'syz'}) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) timerfd_gettime(r3, &(0x7f0000000100)) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000300), 0x3) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x22a) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x37, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r8 = dup(r7) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000600)=ANY=[@ANYBLOB="e07d2ccbc9a4f0b23c9fda78c06b9c329a48c9c459c4c89f8a9052d971063753bcbce6ec962ca2cf722e6493a8044703ba0a2328874b8d1a8ff47444f5f95d619edb5d579e0000000000000000000000009e68edc41c5f34a6ba829ba9e5162a9e9303a1c24055426427ce8c75a383ca8042bfb88dc59bbca47258a7b216bdbae1d1064f837adfed905454c3d7d001d6fec4e887"], 0x1) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 18:26:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f00000003c0)="9892f0e83400883f6d26ef20e53e9f2c", 0x10, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8, 0x4) sync_file_range(0xffffffffffffffff, 0x3b, 0x40, 0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r5, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) tee(r3, r0, 0x400, 0xd) 18:26:29 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x372, 0x2100, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}}, 0x40000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r7, r8, 0x0, 0x8000ffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000003c0)}, 0xffffff7d) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) [ 244.406467] input: syz1 as /devices/virtual/input/input264 [ 244.442519] input: syz1 as /devices/virtual/input/input265 18:26:29 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba4]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x3) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r3, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) fsetxattr$security_ima(r3, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="fbe8b28775dc0cf967d23ac8de2b7751e301cbf85138ffde648fc2f56002a74386b77fe5ec0e6656483ee268eb4c9b1bc0497500a4fea7fd60001128d887ebc9ce3ba0840c741232ad1b19e7f59466544ee883f32b3af0ce4d17289baec55fda74365e5c91085777a39a39f90a889d81b7256c0b0f8f498e05a3197e8f8489ca12f5321f253ffcec0cc3c22af83ebcdfbab1b860c5165ed378b7221d4b07b12f6a14b54f6855f949de231f3e6dcf1c4599e44a9c"], 0x1, 0x1) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r5 = getpid() r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1b, 0x18, 0x9, 0x7, 0xcb, "7cc5b7207591a62d2ed55687f5aaef17840b55a4a3a0e1a3d976adf0b7b77e823eb7f241e430a484355e66871209a060348086c2e2a94ba7d3a05c2e1be3da878de10fc678701af0789b34079cf8d2571376b2d00380c20bb03c8a32b1730d49e205318a7dd04cbc804eb56208422a00a20a1fa3956b1c19cceca88d10249fbbc3018926b10ef32e6ddf3c182fbd0b2ca7f0a1c73143fdc266b83b0d45f2de150a4032f586ef4f9df282da50f59263f73335cb492f4aefe06da4bac49c8323aa82682318ac57a4ab38c59f"}]}, 0xe8}}, 0x0) prlimit64(r5, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r1, 0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(r7, &(0x7f0000000580), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r5, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)) [ 245.341682] input: syz1 as /devices/virtual/input/input269 18:26:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffffffffffd, 0x2ffffffff}, 0xb) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000700)}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x9}}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x60ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000040), 0x5) r7 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x1000, &(0x7f0000000640)=0x0) r9 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r9, 0x20080000) keyctl$revoke(0x3, r9) request_key(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, r9) add_key(&(0x7f0000000680)='big_key\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, r9) add_key$keyring(&(0x7f00000003c0)='\x05\xd2\x19Ld+B5', &(0x7f0000000800)={'Sy{', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r10 = request_key(&(0x7f0000000300)='\xd1\xb7S\xd8\x00', &(0x7f0000000880)={'\x00\xea6', 0x1}, &(0x7f0000000840)='IPVS\x00\x1f\x808c\x9e\xe7\x14\xcd\xff\xa6*\xce\x05\x15\xf0K\x8a\x998\x82\x0e\"eQ\xe6~2\xdcv\t\xbb\x1ao\xe3\x90Z\xab\x1e\xc8', 0x0) keyctl$set_timeout(0xf, r10, 0x6) io_submit(r8, 0x1, &(0x7f0000001b80)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000b40), 0x0, 0x4, 0x0, 0x2, r5}]) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_init1(0x80000) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x400) r12 = fcntl$getown(0xffffffffffffffff, 0x9) r13 = syz_open_procfs(r12, 0x0) finit_module(r13, 0x0, 0x0) r14 = openat$tun(0xffffffffffffff9c, 0x0, 0x1d1200, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, 0x0) fstat(r14, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000400)=[r11, 0xffffffffffffffff, r15, 0xee01, r11]) socket(0x0, 0x2, 0xe3) r16 = socket$inet6(0xa, 0x400000000001, 0x0) close(r16) r17 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x200005) sendfile(r16, r17, 0x0, 0x8000ffffffff) getsockname(r16, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r18, &(0x7f0000000740)={0x10002000400b}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 18:26:30 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x372, 0x2100, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}}, 0x40000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r7, r8, 0x0, 0x8000ffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000003c0)}, 0xffffff7d) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffffffffffd, 0x2ffffffff}, 0xb) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000700)}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x9}}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x60ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000040), 0x5) r7 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x1000, &(0x7f0000000640)=0x0) r9 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r9, 0x20080000) keyctl$revoke(0x3, r9) request_key(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, r9) add_key(&(0x7f0000000680)='big_key\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, r9) add_key$keyring(&(0x7f00000003c0)='\x05\xd2\x19Ld+B5', &(0x7f0000000800)={'Sy{', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r10 = request_key(&(0x7f0000000300)='\xd1\xb7S\xd8\x00', &(0x7f0000000880)={'\x00\xea6', 0x1}, &(0x7f0000000840)='IPVS\x00\x1f\x808c\x9e\xe7\x14\xcd\xff\xa6*\xce\x05\x15\xf0K\x8a\x998\x82\x0e\"eQ\xe6~2\xdcv\t\xbb\x1ao\xe3\x90Z\xab\x1e\xc8', 0x0) keyctl$set_timeout(0xf, r10, 0x6) io_submit(r8, 0x1, &(0x7f0000001b80)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000b40), 0x0, 0x4, 0x0, 0x2, r5}]) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_init1(0x80000) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x400) r12 = fcntl$getown(0xffffffffffffffff, 0x9) r13 = syz_open_procfs(r12, 0x0) finit_module(r13, 0x0, 0x0) r14 = openat$tun(0xffffffffffffff9c, 0x0, 0x1d1200, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, 0x0) fstat(r14, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000400)=[r11, 0xffffffffffffffff, r15, 0xee01, r11]) socket(0x0, 0x2, 0xe3) r16 = socket$inet6(0xa, 0x400000000001, 0x0) close(r16) r17 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x200005) sendfile(r16, r17, 0x0, 0x8000ffffffff) getsockname(r16, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r18, &(0x7f0000000740)={0x10002000400b}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') [ 246.218106] input: syz1 as /devices/virtual/input/input272 18:26:31 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba4]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x3) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r3, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) fsetxattr$security_ima(r3, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="fbe8b28775dc0cf967d23ac8de2b7751e301cbf85138ffde648fc2f56002a74386b77fe5ec0e6656483ee268eb4c9b1bc0497500a4fea7fd60001128d887ebc9ce3ba0840c741232ad1b19e7f59466544ee883f32b3af0ce4d17289baec55fda74365e5c91085777a39a39f90a889d81b7256c0b0f8f498e05a3197e8f8489ca12f5321f253ffcec0cc3c22af83ebcdfbab1b860c5165ed378b7221d4b07b12f6a14b54f6855f949de231f3e6dcf1c4599e44a9c"], 0x1, 0x1) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r5 = getpid() r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1b, 0x18, 0x9, 0x7, 0xcb, "7cc5b7207591a62d2ed55687f5aaef17840b55a4a3a0e1a3d976adf0b7b77e823eb7f241e430a484355e66871209a060348086c2e2a94ba7d3a05c2e1be3da878de10fc678701af0789b34079cf8d2571376b2d00380c20bb03c8a32b1730d49e205318a7dd04cbc804eb56208422a00a20a1fa3956b1c19cceca88d10249fbbc3018926b10ef32e6ddf3c182fbd0b2ca7f0a1c73143fdc266b83b0d45f2de150a4032f586ef4f9df282da50f59263f73335cb492f4aefe06da4bac49c8323aa82682318ac57a4ab38c59f"}]}, 0xe8}}, 0x0) prlimit64(r5, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r1, 0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(r7, &(0x7f0000000580), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r5, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)) [ 247.027804] input: syz1 as /devices/virtual/input/input273 18:26:32 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x372, 0x2100, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}}, 0x40000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r7, r8, 0x0, 0x8000ffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000003c0)}, 0xffffff7d) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:32 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba4]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x3) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r3, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) fsetxattr$security_ima(r3, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="fbe8b28775dc0cf967d23ac8de2b7751e301cbf85138ffde648fc2f56002a74386b77fe5ec0e6656483ee268eb4c9b1bc0497500a4fea7fd60001128d887ebc9ce3ba0840c741232ad1b19e7f59466544ee883f32b3af0ce4d17289baec55fda74365e5c91085777a39a39f90a889d81b7256c0b0f8f498e05a3197e8f8489ca12f5321f253ffcec0cc3c22af83ebcdfbab1b860c5165ed378b7221d4b07b12f6a14b54f6855f949de231f3e6dcf1c4599e44a9c"], 0x1, 0x1) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r5 = getpid() r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1b, 0x18, 0x9, 0x7, 0xcb, "7cc5b7207591a62d2ed55687f5aaef17840b55a4a3a0e1a3d976adf0b7b77e823eb7f241e430a484355e66871209a060348086c2e2a94ba7d3a05c2e1be3da878de10fc678701af0789b34079cf8d2571376b2d00380c20bb03c8a32b1730d49e205318a7dd04cbc804eb56208422a00a20a1fa3956b1c19cceca88d10249fbbc3018926b10ef32e6ddf3c182fbd0b2ca7f0a1c73143fdc266b83b0d45f2de150a4032f586ef4f9df282da50f59263f73335cb492f4aefe06da4bac49c8323aa82682318ac57a4ab38c59f"}]}, 0xe8}}, 0x0) prlimit64(r5, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r1, 0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(r7, &(0x7f0000000580), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r5, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)) 18:26:32 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x372, 0x2100, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}}, 0x40000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r7, r8, 0x0, 0x8000ffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000003c0)}, 0xffffff7d) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:32 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x372, 0x2100, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}}, 0x40000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r7, r8, 0x0, 0x8000ffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000003c0)}, 0xffffff7d) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 248.281610] input: syz1 as /devices/virtual/input/input277 [ 248.287399] input: syz1 as /devices/virtual/input/input276 18:26:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe7e2dc80e060508b) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) getuid() getresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x200, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(0xffffffffffffffff) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0x1f, 0x0, 0x0, 0x0) shutdown(r2, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 18:26:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe7e2dc80e060508b) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) getuid() getresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x200, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(0xffffffffffffffff) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0x1f, 0x0, 0x0, 0x0) shutdown(r2, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 18:26:34 executing program 5: flock(0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000400)="81032909000000545142cf950180674f", 0x10) fdatasync(0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x8000) openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/keychord\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_GET_TID_ADDRESS(0x22, &(0x7f0000000180)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000480)={0xffffffff, {{0xa, 0x4e24, 0xb7, @remote, 0xffffffff}}}, 0x84) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r6) creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r8, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000013c0)=@getspdinfo={0x1228, 0x25, 0x0, 0x70bd2a, 0x25dfdbfd, 0x9, [@offload={0xc, 0x1c, {r9}}, @migrate={0x190, 0x11, [{@in=@rand_addr=0x80, @in6=@loopback, 0x33, 0x4, 0x0, 0x3504, 0x2, 0xa}, {@in=@empty, @in=@rand_addr=0x7fff, 0x74, 0x2, 0x0, 0x3503, 0x6, 0xa}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff, 0x2, 0x0, 0x3505, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0xff, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in6=@dev={0xfe, 0x80, [], 0x22}, @in=@empty, 0x33, 0xc583838f47c84f4b, 0x0, 0x3506, 0x2, 0x5}, {@in=@local, @in=@local, 0x75, 0x7, 0x0, 0x3503, 0xa, 0x7}, {@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x0, 0x3, 0x0, 0x3506, 0xa, 0xa}, {@in6=@remote, @in=@empty, 0x68, 0x3, 0x0, 0x3503, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0xe}, 0x2b, 0x9781fc829593d695, 0x0, 0x34ff, 0xa, 0x2}]}, @coaddr={0x14, 0xe, @in=@loopback}, @policy_type={0xc}, @ipv4_hthresh={0x8, 0x3, {0x1e}}, @mark={0xc, 0x15, {0x350759, 0x9}}, @output_mark={0x8, 0x1d, 0x5}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x4, 0x1000, "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"}}, @output_mark={0x8, 0x1d, 0x8}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd2d, 0x70bd26, 0x99, 0x2, [0x0, 0x6, 0x1]}}]}, 0x1228}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18:26:34 executing program 0: r0 = socket(0x4000e, 0x0, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'veth0Fto_tga-\x00'}, 0x51) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000005c0)="167b4c950549b91533ba2ded7339978fe2cab312f5a4972f36c39f8dc3374d0d704a101dd26738a112cad2553696ab4586081f34ff8181e79b53d75b40448d951d913b05544116938cad4d890eff07493126a91aeb0000000000000000") socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8_\xfd`\xd2\x1f\xaf\x1c! ') setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x4, [@multicast2, @multicast1, @remote, @empty]}, 0x20) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3, 0x0, 0x104}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x6) sendmmsg$unix(r4, &(0x7f00000bd000), 0x92492492492493a, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002000)=[{&(0x7f00000003c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c262569250008000c000000000000a3c728f1c46b7b31afdc1338d54400009b0400000000000000", 0xfffffe2b}], 0x2000012b, 0x0, 0xe3}, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2801) ioctl$BLKSECDISCARD(r8, 0x127d, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r8]) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x4, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x802, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r10, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044014) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r7, 0x0) ftruncate(r6, 0x6) ioctl$TIOCLINUX7(r7, 0x541c, &(0x7f0000000340)) 18:26:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) tee(r2, 0xffffffffffffffff, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:34 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="1a4318c9646b3b2ba6f938dc40781bf014d1dc0e32d132e24dc8d8cfd4fe5396ae7b6a4da7014b8a6f05ec6f1d5f99b0636ceb658fb9378d9fcc0e96a07a99aa80d45962a9a5300cf76a7ab353b1c2e6caed160a5f93f2b5155ab21ff962005b70da17c81ac0f78215c6aaea1cc37bd5e12c4254ba6bfd3b4c0539cc3800068e48d39468c27e89304cbe7cb366d1dd8dcc3bc1c86b24f34900d2da083e2504cecc1267303050953f4b09b77dd1797058862c1a6d5c04cc1323553335b69074e195ddbb490c21ecb79e0759b97e30d0df18da699e780a78d2f3ee21024bb40e3bb9be5807ef5a3af8eecc0b5be71b5e521b73648cb83fdd04876d0c990e6cfcb66c17321dba7ab9b9470880f596c6c587309619d41a29e6c7bce25d63df46fa8885593cada02eeebdfb4e4142120e8acbb2cdee35da328e6ce28f8164969cdca0cd2e471277e348880bce09fac327e8d107edd7a3ba846c759d3a120aa95b37d2f5133fde44ac2df247d0c57574b55d745351df7b4ab92a9235f8ad0ffc7d4112f7ad1aa5c2fed654e271c8d60eb8f3477367b2fc1b2c095a7d2e37f793a3d4dac16bf6dc2454c91948119e33df9675a5f752159862742bee7b0ffb66c90977cfd40cd662196ccd06b5aad459d953f8d9553de255def54cf96d194d6eeb9c85eaf01ba48e3ebfeef8596dc905e00ea5a2959e242cf118a0fa8401bf1ea25bfccaa104de763564e0d4e1a7d8de26c36495f536b0a2009513b0705b3ed87d04d123276c737ccb285c3495d7df6a409a41c056f30a5d0bfac22f6ff83c48677d418d4db713eb896a537657607d22a2a888f28a53369bd0cd2d6c56ff463c3b6228021520b73c0ef5af136ed6175283c44b4ba3d22172b0768f7aba209f9a73c74b0cf0be9e867d95439a982167cb6e962ea57fe312a95ffa8c7620f0086950a863731bccc95ca24c3901c4f8e18ba855899fc8d77656701709df74fa319895dff2e67f0e1b305959f640b526f9182945de58fb176090cd17a8190bef770c5ae0e240adeaa6a5d3682599b8e9cdb440c8295225b1e40fb23108efcb3475082be4dc72b4fdcf557d8758eb033b7f909812b382f7bc723b7a0178032914dc8e6f9aa5fa73b180bdc3ec4cb2b8ca14bd084ee3e9fd910bec8643fa5022b7d92b1f4fd6fa7faefafab745f2b1fc7a542463c6cf5c00b144cb2b676fdae463fa8c8e9e5ef509bd70f11589877475d7f5dd0300ea58982ef4d165f5bd6cf5cc39f6997e4cd0a5e080c1a19f348bc9fb62b1a8fe92fed9dff378b90b0226291986fe674b36fbd3c7f58a8ca78397442aebcc9039796a61f26f84e10fc1d63bd6028ae6e0287fb207b6ba039e0950af396fa54ef25445375e8a66e984ec2b396235f5966a57d60616bd238fa46b8a8bd3c585c54d2755a760e7c1d1ddc2a3c7efe1615714a2eabd1c8e08647c4b50006a67559fa089d3c4ca9531caa875d3faffa1489a0fe1888fcd1e8ba747072daefd6eb6e26774fb3755075fb210e6bacb0639005a8e38d404a22049ab753c54beecbcba39c5f16b99a4dbec12574076b3bb99f67f60907061df27792f0b3b5081bc422050f234542cba5f7187283af8cfb3af72e2d42312c50baabff9c2295243d5377a90da3fa3c4b03d8bbc64cfa3840543c92eea8be0b6edca7de30c825a86a73b28a6f03dc14e0a62c557ba14da978b66262fb93b8e8b182e7d7a90222fac5228864f312ccb51d47a67309218c4714ed3e36c99ff4403d6e507fc2d1e844da02da48cc410d6ba19bf1c1e1b1a8c7b933c162d28c1422171bd890d0ade869ba87a8ab6e1b46ac23472ff206d5bbf4a3102fc34918609e2e0faee8ac0e92afaf418cb8d7968dd9ff05eeca34f60131c250ac897c4a721e5ddfbdac7d7a99ea499ba79c883e05e85e8b2d27bb364078833f4e79e1637a66868f958736b4344b2324c320933e2882dd31aa27aa80f64655e4bb1baf5eca806ac77235dd4daf2c2e471b7c0c5be21a3d0f73103f4134b0a1c0056c967d4be52beaaf5d1ae15cc1ed829a790fe468c92fab9f6e453e766be8034c9c705e5477ebffb774fde2e89b18c696a261911d4bc7fea947237fc18fce548c1059c01d1acd1961b07651ee2c0d3ff7ce1ff98d924f74e9e13fe53489dd39f95efc2c0e39eafa34cc4a2b35fb66760cd4fa793233591f59e99cfe1195c9e33616ade60677279ee759d2abe0bf9bad750ef89d7be686c46e47376ec228d2feaae36e54f6ef35c13ee910edaece7e1abcf16be1a4f82cd9fccb78a7b708e85fa128d6a6e9e7a14f1164fc6046571f088948828eafb71fe9ac301e93f3d44537ae641ebbb72564b5fc2e982d5be62d3152d192ff024fd0d0c2933448ea6f9fbe4cb45f899c2c3c31aa3a73f48d138c7d73a1bbbd36e632dabbd4d1225c887b8cfa907216fa86bba74e9021fa4692200a084bcfc591101de3082a089d6fe3d60ff4b3f4a2bd7e0673fe4579c8a3fed335fd99b443fc582ea5d527fd708a2e7049d2e666de04fc6ee7532ab9659d9f0d9fc46852d830fed0075fb06d97c4aea1d8d8f868a351e3b640e702ebbfe8d6c8525839296aab23bece11f08b6ee2f59cd9d44eaeecedb944d74431191fa3ac3bad3767346bc0a87b379320aac9b568024f8d9f8d7013bc03f57acd7961016190910b1f442d530d2ed131283ab864f9774ecbd250f31ccdb6ced2484eb1439325d1f085faac85b62b43802124a96f2e36d9cacf2c051d602f9e8d301dce33340b474ac4f25561fab769695570b46d1052cae755052613cd65c861e289057d7fad4ead9dceaa99c7b865cef91118409c86eb25b79a9a460be79018e577b7c99e2af18bf11fd6ccf", 0x7f0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="020100090a00ff01000000000000000005001100e30000000a004e240000f709fe80000000000000000000e729458096020c9b0000000000030005002b00000002000000e000000100000000000000009d51314e0f153adb1ef89353a39575f8ce7ce8bbc47cbe83858c14c7a7e74d30715145bed400082d05a7939ea2cad6573d11c72924f1ccdac35832f1e69d9b82d92c9544fe9c030a265f50112a34917f4b63fb3b2f442d653037e5dfb81d10cc3099d7249a5504fe76db997b22403375f6d1d0caa435c33cd683998f3d6a58097a"], 0xd1}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000030006000000000002000000e0000001000000000000000002000100000000000000000b00000000030000000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300260000003f72fe3288b8d6732779acb2431e42031eebb0840da0813505000002000100000000000000000b000000000300052dee05000000000000e000000000"], 0x46}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000180)={0x8000200b}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x1, 0x0, 0x2}]}, 0xffffffffffffff15) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x33, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 249.856034] input: syz1 as /devices/virtual/input/input280 18:26:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x620802, 0x0) inotify_init1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffffffffffeb0) epoll_pwait(r3, &(0x7f0000000300)=[{}, {}], 0x2, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xdff, 0x10000) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/106, 0x6a}], 0x2, 0x0) fcntl$setlease(r3, 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000005c0)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000005580)='/selinux/checkreqprot\x00', 0x8000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000055c0)={'icmp6\x00'}, &(0x7f0000000140)=0xffffffffffffff0c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='.\xb3syz1\x00', 0x200002, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) fcntl$getownex(r4, 0x10, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x100) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x140) r6 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendfile(r5, r6, 0x0, 0x5a92) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f00000001c0)) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000002c0)) sendfile(r6, r6, &(0x7f00000000c0)=0x2, 0xbf99) 18:26:35 executing program 0: r0 = socket(0x4000e, 0x0, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'veth0Fto_tga-\x00'}, 0x51) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000005c0)="167b4c950549b91533ba2ded7339978fe2cab312f5a4972f36c39f8dc3374d0d704a101dd26738a112cad2553696ab4586081f34ff8181e79b53d75b40448d951d913b05544116938cad4d890eff07493126a91aeb0000000000000000") socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8_\xfd`\xd2\x1f\xaf\x1c! ') setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x4, [@multicast2, @multicast1, @remote, @empty]}, 0x20) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3, 0x0, 0x104}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x6) sendmmsg$unix(r4, &(0x7f00000bd000), 0x92492492492493a, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002000)=[{&(0x7f00000003c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c262569250008000c000000000000a3c728f1c46b7b31afdc1338d54400009b0400000000000000", 0xfffffe2b}], 0x2000012b, 0x0, 0xe3}, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2801) ioctl$BLKSECDISCARD(r8, 0x127d, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r8]) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x4, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x802, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r10, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044014) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r7, 0x0) ftruncate(r6, 0x6) ioctl$TIOCLINUX7(r7, 0x541c, &(0x7f0000000340)) [ 250.462655] mmap: syz-executor.1 (8296) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 18:26:36 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7f0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="020100090a00ff01000000000000000005001100e30000000a004e240000f709fe80000000000000000000e729458096020c9b0000000000030005002b00000002000000e000000100000000000000009d51314e0f153adb1ef89353a39575f8ce7ce8bbc47cbe83858c14c7a7e74d30715145bed400082d05a7939ea2cad6573d11c72924f1ccdac35832f1e69d9b82d92c9544fe9c030a265f50112a34917f4b63fb3b2f442d653037e5dfb81d10cc3099d7249a5504fe76db997b22403375f6d1d0caa435c33cd683998f3d6a58097a"], 0xd1}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000030006000000000002000000e0000001000000000000000002000100000000000000000b00000000030000000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300260000003f72fe3288b8d6732779acb2431e42031eebb0840da0813505000002000100000000000000000b000000000300052dee05000000000000e000000000"], 0x46}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000180)={0x8000200b}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x1, 0x0, 0x2}]}, 0xffffffffffffff15) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x33, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) tee(r2, 0xffffffffffffffff, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:36 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="1a4318c9646b3b2ba6f938dc40781bf014d1dc0e32d132e24dc8d8cfd4fe5396ae7b6a4da7014b8a6f05ec6f1d5f99b0636ceb658fb9378d9fcc0e96a07a99aa80d45962a9a5300cf76a7ab353b1c2e6caed160a5f93f2b5155ab21ff962005b70da17c81ac0f78215c6aaea1cc37bd5e12c4254ba6bfd3b4c0539cc3800068e48d39468c27e89304cbe7cb366d1dd8dcc3bc1c86b24f34900d2da083e2504cecc1267303050953f4b09b77dd1797058862c1a6d5c04cc1323553335b69074e195ddbb490c21ecb79e0759b97e30d0df18da699e780a78d2f3ee21024bb40e3bb9be5807ef5a3af8eecc0b5be71b5e521b73648cb83fdd04876d0c990e6cfcb66c17321dba7ab9b9470880f596c6c587309619d41a29e6c7bce25d63df46fa8885593cada02eeebdfb4e4142120e8acbb2cdee35da328e6ce28f8164969cdca0cd2e471277e348880bce09fac327e8d107edd7a3ba846c759d3a120aa95b37d2f5133fde44ac2df247d0c57574b55d745351df7b4ab92a9235f8ad0ffc7d4112f7ad1aa5c2fed654e271c8d60eb8f3477367b2fc1b2c095a7d2e37f793a3d4dac16bf6dc2454c91948119e33df9675a5f752159862742bee7b0ffb66c90977cfd40cd662196ccd06b5aad459d953f8d9553de255def54cf96d194d6eeb9c85eaf01ba48e3ebfeef8596dc905e00ea5a2959e242cf118a0fa8401bf1ea25bfccaa104de763564e0d4e1a7d8de26c36495f536b0a2009513b0705b3ed87d04d123276c737ccb285c3495d7df6a409a41c056f30a5d0bfac22f6ff83c48677d418d4db713eb896a537657607d22a2a888f28a53369bd0cd2d6c56ff463c3b6228021520b73c0ef5af136ed6175283c44b4ba3d22172b0768f7aba209f9a73c74b0cf0be9e867d95439a982167cb6e962ea57fe312a95ffa8c7620f0086950a863731bccc95ca24c3901c4f8e18ba855899fc8d77656701709df74fa319895dff2e67f0e1b305959f640b526f9182945de58fb176090cd17a8190bef770c5ae0e240adeaa6a5d3682599b8e9cdb440c8295225b1e40fb23108efcb3475082be4dc72b4fdcf557d8758eb033b7f909812b382f7bc723b7a0178032914dc8e6f9aa5fa73b180bdc3ec4cb2b8ca14bd084ee3e9fd910bec8643fa5022b7d92b1f4fd6fa7faefafab745f2b1fc7a542463c6cf5c00b144cb2b676fdae463fa8c8e9e5ef509bd70f11589877475d7f5dd0300ea58982ef4d165f5bd6cf5cc39f6997e4cd0a5e080c1a19f348bc9fb62b1a8fe92fed9dff378b90b0226291986fe674b36fbd3c7f58a8ca78397442aebcc9039796a61f26f84e10fc1d63bd6028ae6e0287fb207b6ba039e0950af396fa54ef25445375e8a66e984ec2b396235f5966a57d60616bd238fa46b8a8bd3c585c54d2755a760e7c1d1ddc2a3c7efe1615714a2eabd1c8e08647c4b50006a67559fa089d3c4ca9531caa875d3faffa1489a0fe1888fcd1e8ba747072daefd6eb6e26774fb3755075fb210e6bacb0639005a8e38d404a22049ab753c54beecbcba39c5f16b99a4dbec12574076b3bb99f67f60907061df27792f0b3b5081bc422050f234542cba5f7187283af8cfb3af72e2d42312c50baabff9c2295243d5377a90da3fa3c4b03d8bbc64cfa3840543c92eea8be0b6edca7de30c825a86a73b28a6f03dc14e0a62c557ba14da978b66262fb93b8e8b182e7d7a90222fac5228864f312ccb51d47a67309218c4714ed3e36c99ff4403d6e507fc2d1e844da02da48cc410d6ba19bf1c1e1b1a8c7b933c162d28c1422171bd890d0ade869ba87a8ab6e1b46ac23472ff206d5bbf4a3102fc34918609e2e0faee8ac0e92afaf418cb8d7968dd9ff05eeca34f60131c250ac897c4a721e5ddfbdac7d7a99ea499ba79c883e05e85e8b2d27bb364078833f4e79e1637a66868f958736b4344b2324c320933e2882dd31aa27aa80f64655e4bb1baf5eca806ac77235dd4daf2c2e471b7c0c5be21a3d0f73103f4134b0a1c0056c967d4be52beaaf5d1ae15cc1ed829a790fe468c92fab9f6e453e766be8034c9c705e5477ebffb774fde2e89b18c696a261911d4bc7fea947237fc18fce548c1059c01d1acd1961b07651ee2c0d3ff7ce1ff98d924f74e9e13fe53489dd39f95efc2c0e39eafa34cc4a2b35fb66760cd4fa793233591f59e99cfe1195c9e33616ade60677279ee759d2abe0bf9bad750ef89d7be686c46e47376ec228d2feaae36e54f6ef35c13ee910edaece7e1abcf16be1a4f82cd9fccb78a7b708e85fa128d6a6e9e7a14f1164fc6046571f088948828eafb71fe9ac301e93f3d44537ae641ebbb72564b5fc2e982d5be62d3152d192ff024fd0d0c2933448ea6f9fbe4cb45f899c2c3c31aa3a73f48d138c7d73a1bbbd36e632dabbd4d1225c887b8cfa907216fa86bba74e9021fa4692200a084bcfc591101de3082a089d6fe3d60ff4b3f4a2bd7e0673fe4579c8a3fed335fd99b443fc582ea5d527fd708a2e7049d2e666de04fc6ee7532ab9659d9f0d9fc46852d830fed0075fb06d97c4aea1d8d8f868a351e3b640e702ebbfe8d6c8525839296aab23bece11f08b6ee2f59cd9d44eaeecedb944d74431191fa3ac3bad3767346bc0a87b379320aac9b568024f8d9f8d7013bc03f57acd7961016190910b1f442d530d2ed131283ab864f9774ecbd250f31ccdb6ced2484eb1439325d1f085faac85b62b43802124a96f2e36d9cacf2c051d602f9e8d301dce33340b474ac4f25561fab769695570b46d1052cae755052613cd65c861e289057d7fad4ead9dceaa99c7b865cef91118409c86eb25b79a9a460be79018e577b7c99e2af18bf11fd6ccf", 0x7f0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="020100090a00ff01000000000000000005001100e30000000a004e240000f709fe80000000000000000000e729458096020c9b0000000000030005002b00000002000000e000000100000000000000009d51314e0f153adb1ef89353a39575f8ce7ce8bbc47cbe83858c14c7a7e74d30715145bed400082d05a7939ea2cad6573d11c72924f1ccdac35832f1e69d9b82d92c9544fe9c030a265f50112a34917f4b63fb3b2f442d653037e5dfb81d10cc3099d7249a5504fe76db997b22403375f6d1d0caa435c33cd683998f3d6a58097a"], 0xd1}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000030006000000000002000000e0000001000000000000000002000100000000000000000b00000000030000000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300260000003f72fe3288b8d6732779acb2431e42031eebb0840da0813505000002000100000000000000000b000000000300052dee05000000000000e000000000"], 0x46}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000180)={0x8000200b}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x1, 0x0, 0x2}]}, 0xffffffffffffff15) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x33, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:36 executing program 5: flock(0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000400)="81032909000000545142cf950180674f", 0x10) fdatasync(0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x8000) openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/keychord\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_GET_TID_ADDRESS(0x22, &(0x7f0000000180)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000480)={0xffffffff, {{0xa, 0x4e24, 0xb7, @remote, 0xffffffff}}}, 0x84) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r6) creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r8, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000013c0)=@getspdinfo={0x1228, 0x25, 0x0, 0x70bd2a, 0x25dfdbfd, 0x9, [@offload={0xc, 0x1c, {r9}}, @migrate={0x190, 0x11, [{@in=@rand_addr=0x80, @in6=@loopback, 0x33, 0x4, 0x0, 0x3504, 0x2, 0xa}, {@in=@empty, @in=@rand_addr=0x7fff, 0x74, 0x2, 0x0, 0x3503, 0x6, 0xa}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff, 0x2, 0x0, 0x3505, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0xff, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in6=@dev={0xfe, 0x80, [], 0x22}, @in=@empty, 0x33, 0xc583838f47c84f4b, 0x0, 0x3506, 0x2, 0x5}, {@in=@local, @in=@local, 0x75, 0x7, 0x0, 0x3503, 0xa, 0x7}, {@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x0, 0x3, 0x0, 0x3506, 0xa, 0xa}, {@in6=@remote, @in=@empty, 0x68, 0x3, 0x0, 0x3503, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0xe}, 0x2b, 0x9781fc829593d695, 0x0, 0x34ff, 0xa, 0x2}]}, @coaddr={0x14, 0xe, @in=@loopback}, @policy_type={0xc}, @ipv4_hthresh={0x8, 0x3, {0x1e}}, @mark={0xc, 0x15, {0x350759, 0x9}}, @output_mark={0x8, 0x1d, 0x5}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x4, 0x1000, "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"}}, @output_mark={0x8, 0x1d, 0x8}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd2d, 0x70bd26, 0x99, 0x2, [0x0, 0x6, 0x1]}}]}, 0x1228}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18:26:36 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7f0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="020100090a00ff01000000000000000005001100e30000000a004e240000f709fe80000000000000000000e729458096020c9b0000000000030005002b00000002000000e000000100000000000000009d51314e0f153adb1ef89353a39575f8ce7ce8bbc47cbe83858c14c7a7e74d30715145bed400082d05a7939ea2cad6573d11c72924f1ccdac35832f1e69d9b82d92c9544fe9c030a265f50112a34917f4b63fb3b2f442d653037e5dfb81d10cc3099d7249a5504fe76db997b22403375f6d1d0caa435c33cd683998f3d6a58097a"], 0xd1}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000030006000000000002000000e0000001000000000000000002000100000000000000000b00000000030000000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300260000003f72fe3288b8d6732779acb2431e42031eebb0840da0813505000002000100000000000000000b000000000300052dee05000000000000e000000000"], 0x46}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000180)={0x8000200b}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x1, 0x0, 0x2}]}, 0xffffffffffffff15) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x33, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:36 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7f0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="020100090a00ff01000000000000000005001100e30000000a004e240000f709fe80000000000000000000e729458096020c9b0000000000030005002b00000002000000e000000100000000000000009d51314e0f153adb1ef89353a39575f8ce7ce8bbc47cbe83858c14c7a7e74d30715145bed400082d05a7939ea2cad6573d11c72924f1ccdac35832f1e69d9b82d92c9544fe9c030a265f50112a34917f4b63fb3b2f442d653037e5dfb81d10cc3099d7249a5504fe76db997b22403375f6d1d0caa435c33cd683998f3d6a58097a"], 0xd1}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000030006000000000002000000e0000001000000000000000002000100000000000000000b00000000030000000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300260000003f72fe3288b8d6732779acb2431e42031eebb0840da0813505000002000100000000000000000b000000000300052dee05000000000000e000000000"], 0x46}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000180)={0x8000200b}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x1, 0x0, 0x2}]}, 0xffffffffffffff15) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x33, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 251.748828] input: syz1 as /devices/virtual/input/input282 18:26:37 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001cc0)='.\x00\x00\x00u\x00\xbf\x87\xdc\xea\xceB&\xc0\xad5[\xf2\x92\x9e\xc7\r?\t\xbeEl\x9aX\xca\x8f\xa6\xd6Y\x18|\x95\xcc\xcf\xf3\xdc\x9f\x85\xfeQ\xadC,w\x1f\x9a\x8c\xd0\xd7{\xf5q\x1d\xa2y\xd9\x84\xf0\xef\x99\xe1Ew\x02/\x12\xfdBC\x84M\x91\xf2\x1c?\x7f)\xce\x99\x8f\xef,\xb1W\x8b\xc0\xee\x89\xe4@\x05\xa4s\xb9\xb1\xb6x\xd7\xcf\xc5I\xbf\x87\xcd\xa4g\xdc?F\x83ak@\x80N\xe1\x90R\xb9|*p\xc7=\x05\xd8\n|\xa6\x98\"A\xb9jz\xce\xee1P\xd3\\s\x9f_\f\xb9A\x84\xf2\xd8\x83\xd86P\b\xd55;i\xe4f\xc7%\xb8\xce2\xb5Z\t-A\x1f\xa6j^\x1b\xcf\xc1\x1fj\xd9\\\xaa\xa3\xce\x06\x80\x00\x00\x00\x00\x00\x00)}!/\xd2\xacr#;+#YE\xb7\xd3x\f\x97\x85\xe3Oat\xe8TN\xb4C\x98^\x8dJ73[\x8bz3', 0x200002, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0xfffffe51, 0x1, 0x0, {0x275de44f}}, 0x9d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x14) fchdir(r2) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000001c0)) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x1) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r4 = open(&(0x7f00000006c0)='./file0\x00', 0x3b5040, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001b80)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000b40)="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", 0xde3, 0x4, 0x0, 0x2, r3}]) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) lsetxattr$security_selinux(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000005c0)='s \xd7\x1dR\xe0ystem_u:object_r:cron_spool_t:s0\x00\a\xf1\xc9_\xec\x82\xc9\x1d\xde\r\xe5\x02\xa2\x1fd\xb7y~\x81\b\xb7\x9f`\x94\x9b@\xdfF\xf4\xeb[\xf6N\xed\xfb\xd0Na\xc7\x87Y\xd2-\x05\xfb\x0f\xb9\xcf\x01mM\xd8\a\xd2\x8f\x12j\xc4;\xa7Z\x87\xd1}\x1b\xf9\xba\x04c\xed\xf2\xab\xde\xbc\x19\x1a>\xa9g\x97\x90uqW\x13dz\xbd\x1d\v\xff\x8c}\xfd*\xc3\xf8\xe6\xd8rF\x12\xb7\xa7C\xe3S\xe2\x95\xbf|\xc0\xe0\x88[\xf7\xa4\x8e{', 0x9e, 0x1) fstat(r2, &(0x7f0000000980)) getgroups(0x3ce, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000540)) lseek(r2, 0x0, 0x3) syz_open_dev$loop(0x0, 0xc62, 0x200400) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@mcast1, @ipv4, @rand_addr="c3f1a87daf812d2d9a3ea40dcab829e1", 0x9, 0x80, 0x1, 0x80, 0xfffffffffffffeff, 0x410144}) 18:26:37 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7f0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="020100090a00ff01000000000000000005001100e30000000a004e240000f709fe80000000000000000000e729458096020c9b0000000000030005002b00000002000000e000000100000000000000009d51314e0f153adb1ef89353a39575f8ce7ce8bbc47cbe83858c14c7a7e74d30715145bed400082d05a7939ea2cad6573d11c72924f1ccdac35832f1e69d9b82d92c9544fe9c030a265f50112a34917f4b63fb3b2f442d653037e5dfb81d10cc3099d7249a5504fe76db997b22403375f6d1d0caa435c33cd683998f3d6a58097a"], 0xd1}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000030006000000000002000000e0000001000000000000000002000100000000000000000b00000000030000000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300260000003f72fe3288b8d6732779acb2431e42031eebb0840da0813505000002000100000000000000000b000000000300052dee05000000000000e000000000"], 0x46}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000180)={0x8000200b}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x1, 0x0, 0x2}]}, 0xffffffffffffff15) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x33, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:37 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x4, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r5, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r6 = dup(r1) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) write$uinput_user_dev(r6, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/74}) pipe(&(0x7f0000000040)) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x40c1, 0x0) ioctl$TCGETX(r7, 0x5432, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0xffffffffffffff64) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000000), 0x0, 0x7a) 18:26:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r2, 0x40}, {r3}, {r2, 0x2070}, {r4, 0x1}, {r2}, {r2, 0x1000}, {r5, 0x19}, {r6, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) splice(0xffffffffffffffff, &(0x7f0000000400), r5, &(0x7f0000000440)=0xfffffffffffffffc, 0x40000000, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r9 = creat(&(0x7f0000000840)='./file1\x00', 0x0) r10 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) write$P9_RREAD(r10, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast}, &(0x7f00000001c0)=0xc) setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000300)={r11, @empty, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) r12 = socket(0x10, 0x2, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') sendfile(r12, r13, 0x0, 0x80000008000000b) accept4$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80000) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@rand_addr="96ac0b63e4364616c53d6e46c66a1b4d", 0x59, r14}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r9, &(0x7f0000000180)={0x6c}, 0x1a6db1e6) r15 = getegid() fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r15) fsync(r9) write$P9_RSTATu(r9, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) r16 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r17, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r18 = dup2(r17, r17) setsockopt$inet_int(r18, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r18, 0x29, 0x41, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/445], &(0x7f0000000040)=0xa3) ioctl$int_in(r8, 0x0, &(0x7f00000001c0)) write$binfmt_script(r9, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r16, 0x0) 18:26:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001a80)=0x10) splice(r1, &(0x7f0000000400), r4, &(0x7f0000000440)=0xfffffffffffffffc, 0x48, 0x4000000008) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'irlan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r6) r7 = creat(&(0x7f00000002c0)='./file1\x00', 0x40) write$P9_RREAD(r5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)=@random={'user.', '\x00'}, &(0x7f0000000300)=""/119, 0x77) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000700)) fsync(r4) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000380)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getpgid(0xffffffffffffffff) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x1a1042, 0x0) ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000000600)) open(&(0x7f0000000540)='./file1\x00', 0x1, 0x11) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000740)) lstat(0x0, &(0x7f0000000640)) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4000000000001b9, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) [ 253.206240] audit: type=1401 audit(1575397597.871:24): op=setxattr invalid_context=7320D71D52E0797374656D5F753A6F626A6563745F723A63726F6E5F73706F6F6C5F743A73300007F1C95FEC82C91DDE0DE502A21F64B7797E8108B79F60949B40DF46F4EB5BF64EEDFBD04E61C78759D22D05FB0FB9CF016D4DD807D28F126AC43BA75A87D17D1BF9BA0463EDF2ABDEBC191A3EA967979075715713647ABD1D0BFF8C7DFD2AC3F8E6D8724612B7A743E353E295BF7CC0E0885BF7A48E7B 18:26:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) tee(r2, 0xffffffffffffffff, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:38 executing program 5: flock(0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000400)="81032909000000545142cf950180674f", 0x10) fdatasync(0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x8000) openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/keychord\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_GET_TID_ADDRESS(0x22, &(0x7f0000000180)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000480)={0xffffffff, {{0xa, 0x4e24, 0xb7, @remote, 0xffffffff}}}, 0x84) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r6) creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r8, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000013c0)=@getspdinfo={0x1228, 0x25, 0x0, 0x70bd2a, 0x25dfdbfd, 0x9, [@offload={0xc, 0x1c, {r9}}, @migrate={0x190, 0x11, [{@in=@rand_addr=0x80, @in6=@loopback, 0x33, 0x4, 0x0, 0x3504, 0x2, 0xa}, {@in=@empty, @in=@rand_addr=0x7fff, 0x74, 0x2, 0x0, 0x3503, 0x6, 0xa}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff, 0x2, 0x0, 0x3505, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0xff, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in6=@dev={0xfe, 0x80, [], 0x22}, @in=@empty, 0x33, 0xc583838f47c84f4b, 0x0, 0x3506, 0x2, 0x5}, {@in=@local, @in=@local, 0x75, 0x7, 0x0, 0x3503, 0xa, 0x7}, {@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x0, 0x3, 0x0, 0x3506, 0xa, 0xa}, {@in6=@remote, @in=@empty, 0x68, 0x3, 0x0, 0x3503, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0xe}, 0x2b, 0x9781fc829593d695, 0x0, 0x34ff, 0xa, 0x2}]}, @coaddr={0x14, 0xe, @in=@loopback}, @policy_type={0xc}, @ipv4_hthresh={0x8, 0x3, {0x1e}}, @mark={0xc, 0x15, {0x350759, 0x9}}, @output_mark={0x8, 0x1d, 0x5}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x4, 0x1000, "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"}}, @output_mark={0x8, 0x1d, 0x8}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd2d, 0x70bd26, 0x99, 0x2, [0x0, 0x6, 0x1]}}]}, 0x1228}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 253.329403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket 18:26:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_ENDIAN(0x14, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x1f, 0xae, 0x4, 0x4}, {0x17, 0x6, 0x3, 0xffffffff}, {0x1, 0x20, 0x80, 0x800}, {0x0, 0xfd, 0xfa, 0xbc29}, {0x9, 0x60, 0x8, 0xa0}]}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r2, 0x40}, {r3}, {r2, 0x2070}, {r4, 0x1}, {r2}, {r2, 0x1000}, {r5, 0x19}, {r6, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r7 = dup(r2) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$RTC_UIE_ON(r7, 0x7003) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r8, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x15, 0xa, 0x2) socket(0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r9, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) [ 253.395050] Dead loop on virtual device ip6tnl0, fix it urgently! [ 253.489605] input: syz1 as /devices/virtual/input/input287 [ 253.727215] audit: type=1401 audit(1575397598.391:25): op=setxattr invalid_context=7320D71D52E0797374656D5F753A6F626A6563745F723A63726F6E5F73706F6F6C5F743A73300007F1C95FEC82C91DDE0DE502A21F64B7797E8108B79F60949B40DF46F4EB5BF64EEDFBD04E61C78759D22D05FB0FB9CF016D4DD807D28F126AC43BA75A87D17D1BF9BA0463EDF2ABDEBC191A3EA967979075715713647ABD1D0BFF8C7DFD2AC3F8E6D8724612B7A743E353E295BF7CC0E0885BF7A48E7B 18:26:38 executing program 0: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, &(0x7f0000000fe0)) dup3(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x10}, 0x2c) sendfile64(r3, r3, 0x0, 0xff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x547000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) fcntl$getown(0xffffffffffffffff, 0x9) epoll_create1(0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000040)) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r6, 0x40}, {r7}, {r6, 0x2070}, {r8, 0x1}, {r6}, {r6, 0x1000}, {r9, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r16 = dup(r11) ioctl$UI_SET_SWBIT(r16, 0x4004556d, 0x0) write$uinput_user_dev(r16, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f0000000680)="ed080000000000000000984780cda9fab21316617e935d00009dc5aef27d00000000a6e78024e3f4d2b3913a08075d80c1127ac021e1be9048fcde5dee8b4b6901d1bc4f72c0a69d512efecfc6ca388a6095d36999d83ac778261487cb7c248b8837479fadb491ea1ae2bc5db565faf895501d4536ec8055f9d673daf268a6535f3dd509670bb62d29143b3f9f4f089ef87b9b07a7b822d14310e8bafc5ba1c909466a7dff0ebdd539e3c1cc5657df40c9ca4dd6b112eaf6f12f11cf3fd6bae5f552e5378c9b741eb8654efb09f174102c6202554848aed5a10d9054a269f00c7c52ff218f723799c54e4198d30d6aa8b1034938e2768499e86c0ea439c8a0350a8efe3c7f990000", 0xffffffffffffff80) read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x157) r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) socket$netlink(0x10, 0x3, 0xa) r19 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r19, 0x200005) r20 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r20, 0x400, 0x4070bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendfile(r18, r19, 0x0, 0x8000ffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFF(r21, 0x400454ca, &(0x7f0000000180)={'bcsh0\x00', 0xec38ed91f9c7494a}) 18:26:38 executing program 2: futex(0x0, 0x400000085, 0x0, 0x0, 0x0, 0x40000002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r0, 0x40}, {r1}, {r0, 0x2070}, {r2, 0x1}, {r0}, {r0, 0x1000}, {r3, 0x19}, {r4, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r5 = dup(r0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x0) write$uinput_user_dev(r5, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000040)) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r6, 0x40}, {r7}, {r6, 0x2070}, {r8, 0x1}, {r6}, {r6, 0x1000}, {r9, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = dup(r6) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x0) write$uinput_user_dev(r11, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() write$FUSE_ATTR(r11, &(0x7f0000000240)={0x78, 0x0, 0x2, {0xfffffffffffffc00, 0x4, 0x0, {0x0, 0x480000, 0x0, 0x6, 0xfc34, 0x4, 0x100, 0x7, 0x2, 0xfffffffb, 0x10000, r12, r13, 0x1, 0x4}}}, 0x78) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000000)={0x8, 'vcan0\x00', {'veth1_to_hsr\x00'}, 0xff}) 18:26:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_ENDIAN(0x14, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x1f, 0xae, 0x4, 0x4}, {0x17, 0x6, 0x3, 0xffffffff}, {0x1, 0x20, 0x80, 0x800}, {0x0, 0xfd, 0xfa, 0xbc29}, {0x9, 0x60, 0x8, 0xa0}]}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r2, 0x40}, {r3}, {r2, 0x2070}, {r4, 0x1}, {r2}, {r2, 0x1000}, {r5, 0x19}, {r6, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r7 = dup(r2) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$RTC_UIE_ON(r7, 0x7003) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r8, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x15, 0xa, 0x2) socket(0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r9, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 18:26:38 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_ENDIAN(0x14, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x1f, 0xae, 0x4, 0x4}, {0x17, 0x6, 0x3, 0xffffffff}, {0x1, 0x20, 0x80, 0x800}, {0x0, 0xfd, 0xfa, 0xbc29}, {0x9, 0x60, 0x8, 0xa0}]}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r2, 0x40}, {r3}, {r2, 0x2070}, {r4, 0x1}, {r2}, {r2, 0x1000}, {r5, 0x19}, {r6, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r7 = dup(r2) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$RTC_UIE_ON(r7, 0x7003) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r8, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x15, 0xa, 0x2) socket(0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r9, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 18:26:38 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="1a4318c9646b3b2ba6f938dc40781bf014d1dc0e32d132e24dc8d8cfd4fe5396ae7b6a4da7014b8a6f05ec6f1d5f99b0636ceb658fb9378d9fcc0e96a07a99aa80d45962a9a5300cf76a7ab353b1c2e6caed160a5f93f2b5155ab21ff962005b70da17c81ac0f78215c6aaea1cc37bd5e12c4254ba6bfd3b4c0539cc3800068e48d39468c27e89304cbe7cb366d1dd8dcc3bc1c86b24f34900d2da083e2504cecc1267303050953f4b09b77dd1797058862c1a6d5c04cc1323553335b69074e195ddbb490c21ecb79e0759b97e30d0df18da699e780a78d2f3ee21024bb40e3bb9be5807ef5a3af8eecc0b5be71b5e521b73648cb83fdd04876d0c990e6cfcb66c17321dba7ab9b9470880f596c6c587309619d41a29e6c7bce25d63df46fa8885593cada02eeebdfb4e4142120e8acbb2cdee35da328e6ce28f8164969cdca0cd2e471277e348880bce09fac327e8d107edd7a3ba846c759d3a120aa95b37d2f5133fde44ac2df247d0c57574b55d745351df7b4ab92a9235f8ad0ffc7d4112f7ad1aa5c2fed654e271c8d60eb8f3477367b2fc1b2c095a7d2e37f793a3d4dac16bf6dc2454c91948119e33df9675a5f752159862742bee7b0ffb66c90977cfd40cd662196ccd06b5aad459d953f8d9553de255def54cf96d194d6eeb9c85eaf01ba48e3ebfeef8596dc905e00ea5a2959e242cf118a0fa8401bf1ea25bfccaa104de763564e0d4e1a7d8de26c36495f536b0a2009513b0705b3ed87d04d123276c737ccb285c3495d7df6a409a41c056f30a5d0bfac22f6ff83c48677d418d4db713eb896a537657607d22a2a888f28a53369bd0cd2d6c56ff463c3b6228021520b73c0ef5af136ed6175283c44b4ba3d22172b0768f7aba209f9a73c74b0cf0be9e867d95439a982167cb6e962ea57fe312a95ffa8c7620f0086950a863731bccc95ca24c3901c4f8e18ba855899fc8d77656701709df74fa319895dff2e67f0e1b305959f640b526f9182945de58fb176090cd17a8190bef770c5ae0e240adeaa6a5d3682599b8e9cdb440c8295225b1e40fb23108efcb3475082be4dc72b4fdcf557d8758eb033b7f909812b382f7bc723b7a0178032914dc8e6f9aa5fa73b180bdc3ec4cb2b8ca14bd084ee3e9fd910bec8643fa5022b7d92b1f4fd6fa7faefafab745f2b1fc7a542463c6cf5c00b144cb2b676fdae463fa8c8e9e5ef509bd70f11589877475d7f5dd0300ea58982ef4d165f5bd6cf5cc39f6997e4cd0a5e080c1a19f348bc9fb62b1a8fe92fed9dff378b90b0226291986fe674b36fbd3c7f58a8ca78397442aebcc9039796a61f26f84e10fc1d63bd6028ae6e0287fb207b6ba039e0950af396fa54ef25445375e8a66e984ec2b396235f5966a57d60616bd238fa46b8a8bd3c585c54d2755a760e7c1d1ddc2a3c7efe1615714a2eabd1c8e08647c4b50006a67559fa089d3c4ca9531caa875d3faffa1489a0fe1888fcd1e8ba747072daefd6eb6e26774fb3755075fb210e6bacb0639005a8e38d404a22049ab753c54beecbcba39c5f16b99a4dbec12574076b3bb99f67f60907061df27792f0b3b5081bc422050f234542cba5f7187283af8cfb3af72e2d42312c50baabff9c2295243d5377a90da3fa3c4b03d8bbc64cfa3840543c92eea8be0b6edca7de30c825a86a73b28a6f03dc14e0a62c557ba14da978b66262fb93b8e8b182e7d7a90222fac5228864f312ccb51d47a67309218c4714ed3e36c99ff4403d6e507fc2d1e844da02da48cc410d6ba19bf1c1e1b1a8c7b933c162d28c1422171bd890d0ade869ba87a8ab6e1b46ac23472ff206d5bbf4a3102fc34918609e2e0faee8ac0e92afaf418cb8d7968dd9ff05eeca34f60131c250ac897c4a721e5ddfbdac7d7a99ea499ba79c883e05e85e8b2d27bb364078833f4e79e1637a66868f958736b4344b2324c320933e2882dd31aa27aa80f64655e4bb1baf5eca806ac77235dd4daf2c2e471b7c0c5be21a3d0f73103f4134b0a1c0056c967d4be52beaaf5d1ae15cc1ed829a790fe468c92fab9f6e453e766be8034c9c705e5477ebffb774fde2e89b18c696a261911d4bc7fea947237fc18fce548c1059c01d1acd1961b07651ee2c0d3ff7ce1ff98d924f74e9e13fe53489dd39f95efc2c0e39eafa34cc4a2b35fb66760cd4fa793233591f59e99cfe1195c9e33616ade60677279ee759d2abe0bf9bad750ef89d7be686c46e47376ec228d2feaae36e54f6ef35c13ee910edaece7e1abcf16be1a4f82cd9fccb78a7b708e85fa128d6a6e9e7a14f1164fc6046571f088948828eafb71fe9ac301e93f3d44537ae641ebbb72564b5fc2e982d5be62d3152d192ff024fd0d0c2933448ea6f9fbe4cb45f899c2c3c31aa3a73f48d138c7d73a1bbbd36e632dabbd4d1225c887b8cfa907216fa86bba74e9021fa4692200a084bcfc591101de3082a089d6fe3d60ff4b3f4a2bd7e0673fe4579c8a3fed335fd99b443fc582ea5d527fd708a2e7049d2e666de04fc6ee7532ab9659d9f0d9fc46852d830fed0075fb06d97c4aea1d8d8f868a351e3b640e702ebbfe8d6c8525839296aab23bece11f08b6ee2f59cd9d44eaeecedb944d74431191fa3ac3bad3767346bc0a87b379320aac9b568024f8d9f8d7013bc03f57acd7961016190910b1f442d530d2ed131283ab864f9774ecbd250f31ccdb6ced2484eb1439325d1f085faac85b62b43802124a96f2e36d9cacf2c051d602f9e8d301dce33340b474ac4f25561fab769695570b46d1052cae755052613cd65c861e289057d7fad4ead9dceaa99c7b865cef91118409c86eb25b79a9a460be79018e577b7c99e2af18bf11fd6ccf", 0x7f0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="020100090a00ff01000000000000000005001100e30000000a004e240000f709fe80000000000000000000e729458096020c9b0000000000030005002b00000002000000e000000100000000000000009d51314e0f153adb1ef89353a39575f8ce7ce8bbc47cbe83858c14c7a7e74d30715145bed400082d05a7939ea2cad6573d11c72924f1ccdac35832f1e69d9b82d92c9544fe9c030a265f50112a34917f4b63fb3b2f442d653037e5dfb81d10cc3099d7249a5504fe76db997b22403375f6d1d0caa435c33cd683998f3d6a58097a"], 0xd1}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000030006000000000002000000e0000001000000000000000002000100000000000000000b00000000030000000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300260000003f72fe3288b8d6732779acb2431e42031eebb0840da0813505000002000100000000000000000b000000000300052dee05000000000000e000000000"], 0x46}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000180)={0x8000200b}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x1, 0x0, 0x2}]}, 0xffffffffffffff15) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x33, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:39 executing program 0: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, &(0x7f0000000fe0)) dup3(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x10}, 0x2c) sendfile64(r3, r3, 0x0, 0xff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x547000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) fcntl$getown(0xffffffffffffffff, 0x9) epoll_create1(0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000040)) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r6, 0x40}, {r7}, {r6, 0x2070}, {r8, 0x1}, {r6}, {r6, 0x1000}, {r9, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r16 = dup(r11) ioctl$UI_SET_SWBIT(r16, 0x4004556d, 0x0) write$uinput_user_dev(r16, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f0000000680)="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", 0xffffffffffffff80) read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x157) r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) socket$netlink(0x10, 0x3, 0xa) r19 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r19, 0x200005) r20 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r20, 0x400, 0x4070bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendfile(r18, r19, 0x0, 0x8000ffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFF(r21, 0x400454ca, &(0x7f0000000180)={'bcsh0\x00', 0xec38ed91f9c7494a}) 18:26:39 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, &(0x7f0000000fe0)) dup3(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x10}, 0x2c) sendfile64(r3, r3, 0x0, 0xff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x547000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) fcntl$getown(0xffffffffffffffff, 0x9) epoll_create1(0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000040)) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r6, 0x40}, {r7}, {r6, 0x2070}, {r8, 0x1}, {r6}, {r6, 0x1000}, {r9, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r16 = dup(r11) ioctl$UI_SET_SWBIT(r16, 0x4004556d, 0x0) write$uinput_user_dev(r16, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f0000000680)="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", 0xffffffffffffff80) read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x157) r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) socket$netlink(0x10, 0x3, 0xa) r19 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r19, 0x200005) r20 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r20, 0x400, 0x4070bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendfile(r18, r19, 0x0, 0x8000ffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFF(r21, 0x400454ca, &(0x7f0000000180)={'bcsh0\x00', 0xec38ed91f9c7494a}) 18:26:39 executing program 1: r0 = socket(0x10, 0x5, 0x1) write(r0, &(0x7f0000000540)="4600000031007f00000083863b715d7b000800007700fbff02000200000006fcffffffffffff0100ff10f1762903000000f356493775a47db12effffffffffffff4c34830174", 0x46) 18:26:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast1, 0x8}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408100, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r2, 0x40}, {r3}, {r2, 0x2070}, {r4, 0x1}, {r2}, {r2, 0x1000}, {r5, 0x19}, {r6, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r7 = dup(r2) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @empty}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, 0x0, 0x2f5, 0x200007fc, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) sendto(r0, &(0x7f00000000c0)='H', 0x1, 0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) [ 254.996054] input: syz1 as /devices/virtual/input/input299 18:26:39 executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000001dc0)="2400000019002551071c0165ff0ffc0202bd1000"/36, 0x24) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r2, 0x40}, {r3}, {r2, 0x2070}, {r4, 0x1}, {r2}, {r2, 0x1000}, {r5, 0x19}, {r6, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000040)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000000040)) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r7, 0x40}, {r8}, {r7, 0x2070}, {r9, 0x1}, {r7}, {r7, 0x1000}, {r10, 0x19}, {r11, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000001a80)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000001b80)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000001bc0)={@loopback, r12}, 0x14) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r15, 0x800454cf, &(0x7f0000000040)) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r13}, {r1, 0x2070}, {r14, 0x1}, {r1}, {r1, 0x1000}, {r15, 0x19}, {r16, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r17 = dup(r1) ioctl$UI_SET_SWBIT(r17, 0x4004556d, 0x0) write$uinput_user_dev(r17, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) sendto$packet(r17, &(0x7f0000000000)="090b9a6d0adf8698ee6008d18ba9d9b3fc6b6a179ad935aa167d7a495dbda7fd976f48edfdaeb7dde9f3ed8c0b518ee68b88df51c24b420c6306de3fe9f57be6e74c4a975c7efa57624d1b02cad9477da5b6137b7758d59c43c3c676f431cc512df60d41cb7e721384bbb4d1676237260fbdbf1de008e4de9a1f3c2b80529c59da994c60189cc6747126c168c1cc8ca3a2ea0071c73a08c012fb108428bb315282c777f8aac7babee364a44c94bb8a06b8e91bc2c080ee46b6c3455982750ba9ea7dcf17186e38289a14bebd4dcc4e2e31", 0xd1, 0x0, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) 18:26:39 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0)=0x3, 0x4) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x15acc76c) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x40000008}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x70, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb7c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x2000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0xa1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000340)=@buf={0x2f, &(0x7f00000001c0)="c06b05967815d17e44418411ba7ee37c3b436aaf25947eecb97721006eae37fccd9b429102cf70a6e89d68e785d598"}) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000440)=0x0) waitid(0x0, r8, &(0x7f00000007c0), 0x0, &(0x7f00000008c0)) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xe) setregid(r5, r5) 18:26:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xf400}, 0x8) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) creat(&(0x7f0000000000)='./file0\x00', 0x100) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x800, @local}, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80) r2 = geteuid() r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r2, r3) socket$inet6(0xa, 0x2, 0x0) fremovexattr(0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote}}, {{}, 0x0, @in6=@mcast1}}, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x0, 0x0, 0x3}}, 0x14) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0x3, @remote}, {0xa, 0x4e23, 0x0, @mcast1, 0x8}, 0x3, [0x4, 0x7, 0x0, 0x0, 0x6, 0x8, 0x80, 0x1]}, 0x5c) openat$full(0xffffffffffffff9c, 0x0, 0x21, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) 18:26:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0xe5, 0x1, 0x0, 0x13, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x3, @perf_config_ext={0xfffffffffffffff9, 0xe9b9}, 0x8, 0x101, 0x10001, 0x2, 0x0, 0x5, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x3, 0x0, 0xaa, 0x0, 0x8, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x8}, 0x1021, 0x2, 0x800, 0x1, 0x3, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffd) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @dev}, 0x800, [0x1841, 0x4, 0x9]}, 0x5c) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000440)) r7 = socket(0xa, 0x802, 0x88) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fgetxattr(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000680)=""/238, 0xee) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1c3842, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r2) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) connect(r15, &(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 18:26:40 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, &(0x7f0000000fe0)) dup3(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x10}, 0x2c) sendfile64(r3, r3, 0x0, 0xff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x547000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) fcntl$getown(0xffffffffffffffff, 0x9) epoll_create1(0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000040)) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r6, 0x40}, {r7}, {r6, 0x2070}, {r8, 0x1}, {r6}, {r6, 0x1000}, {r9, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r16 = dup(r11) ioctl$UI_SET_SWBIT(r16, 0x4004556d, 0x0) write$uinput_user_dev(r16, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f0000000680)="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", 0xffffffffffffff80) read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x157) r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) socket$netlink(0x10, 0x3, 0xa) r19 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r19, 0x200005) r20 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r20, 0x400, 0x4070bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendfile(r18, r19, 0x0, 0x8000ffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFF(r21, 0x400454ca, &(0x7f0000000180)={'bcsh0\x00', 0xec38ed91f9c7494a}) 18:26:40 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) write$cgroup_int(r0, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) lseek(r0, 0x0, 0x3) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x168) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000180)=0x7f) fchmod(0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r4, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) fstat(r4, &(0x7f0000000000)) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r6 = socket$inet6(0x10, 0x3, 0x0) sendfile(r6, r5, &(0x7f0000000500)=0x5, 0xd9) 18:26:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:40 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0)=0x3, 0x4) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x15acc76c) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x40000008}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x70, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb7c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x2000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0xa1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000340)=@buf={0x2f, &(0x7f00000001c0)="c06b05967815d17e44418411ba7ee37c3b436aaf25947eecb97721006eae37fccd9b429102cf70a6e89d68e785d598"}) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000440)=0x0) waitid(0x0, r8, &(0x7f00000007c0), 0x0, &(0x7f00000008c0)) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xe) setregid(r5, r5) [ 256.328098] input: syz1 as /devices/virtual/input/input316 [ 256.508888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28279 sclass=netlink_route_socket 18:26:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0xe5, 0x1, 0x0, 0x13, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x3, @perf_config_ext={0xfffffffffffffff9, 0xe9b9}, 0x8, 0x101, 0x10001, 0x2, 0x0, 0x5, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x3, 0x0, 0xaa, 0x0, 0x8, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x8}, 0x1021, 0x2, 0x800, 0x1, 0x3, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffd) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @dev}, 0x800, [0x1841, 0x4, 0x9]}, 0x5c) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000440)) r7 = socket(0xa, 0x802, 0x88) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fgetxattr(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000680)=""/238, 0xee) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1c3842, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r2) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) connect(r15, &(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 18:26:41 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, &(0x7f0000000fe0)) dup3(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x10}, 0x2c) sendfile64(r3, r3, 0x0, 0xff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x547000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) fcntl$getown(0xffffffffffffffff, 0x9) epoll_create1(0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000040)) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r6, 0x40}, {r7}, {r6, 0x2070}, {r8, 0x1}, {r6}, {r6, 0x1000}, {r9, 0x19}, {r10, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r16 = dup(r11) ioctl$UI_SET_SWBIT(r16, 0x4004556d, 0x0) write$uinput_user_dev(r16, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f0000000680)="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", 0xffffffffffffff80) read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x157) r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) socket$netlink(0x10, 0x3, 0xa) r19 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r19, 0x200005) r20 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r20, 0x400, 0x4070bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendfile(r18, r19, 0x0, 0x8000ffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFF(r21, 0x400454ca, &(0x7f0000000180)={'bcsh0\x00', 0xec38ed91f9c7494a}) 18:26:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0xe5, 0x1, 0x0, 0x13, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x3, @perf_config_ext={0xfffffffffffffff9, 0xe9b9}, 0x8, 0x101, 0x10001, 0x2, 0x0, 0x5, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x3, 0x0, 0xaa, 0x0, 0x8, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x8}, 0x1021, 0x2, 0x800, 0x1, 0x3, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffd) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @dev}, 0x800, [0x1841, 0x4, 0x9]}, 0x5c) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000440)) r7 = socket(0xa, 0x802, 0x88) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fgetxattr(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000680)=""/238, 0xee) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1c3842, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r2) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) connect(r15, &(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 18:26:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0xe5, 0x1, 0x0, 0x13, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x3, @perf_config_ext={0xfffffffffffffff9, 0xe9b9}, 0x8, 0x101, 0x10001, 0x2, 0x0, 0x5, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x3, 0x0, 0xaa, 0x0, 0x8, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x8}, 0x1021, 0x2, 0x800, 0x1, 0x3, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffd) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @dev}, 0x800, [0x1841, 0x4, 0x9]}, 0x5c) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000440)) r7 = socket(0xa, 0x802, 0x88) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fgetxattr(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000680)=""/238, 0xee) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1c3842, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r2) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000040)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000040)) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f0000000040)) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r11, 0x40}, {r12}, {r11, 0x2070}, {r13, 0x1}, {r11}, {r11, 0x1000}, {r14, 0x19}, {r15, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) connect(r15, &(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 18:26:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:42 executing program 1: bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="6744669800000000040000905481c07fd55b8c50ba01170003040000209f52afe9e4cfd07b5cf8cd9362139bcddfd20a87b6fb484996000000000000000386052de1fd2543a3b87367de10bc3de31b3a87a5e1c98b3be5d855cd04a27a3476d54c0970021397225e00000000000000005f050000000000000073f8044038b5776789aef960b7bdc9581ede01a4de8c8d4ecd65a1a1b3c8ccb90257ac0e96af105eaafdad13e5f579d061f763c7cbe053921ad68143bd9af900000000dc7bd9863eb3e1a9c2978061cfd73975e70c08c83ce5c735929018fe4f9e35d927dd113e47"], 0x1) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198) openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000280)) ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 18:26:42 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2b9ead3f010b9b04, &(0x7f0000000100), 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2f0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffffffffffeb0) epoll_pwait(r3, &(0x7f0000000300)=[{}, {}], 0x2, 0x7, 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r4, 0x4, 0x44800) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0x2f, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x64) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0x9, 0x4) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x200000, 0x8) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)) write$eventfd(r7, &(0x7f00000001c0), 0xffffff7f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000]}, 0x45c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000040)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000000040)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000040)) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r8, 0x40}, {r9}, {r8, 0x2070}, {r10, 0x1}, {r8}, {r8, 0x1000}, {r11, 0x19}, {r12, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r13 = dup(r8) ioctl$UI_SET_SWBIT(r13, 0x4004556d, 0x0) write$uinput_user_dev(r13, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd79c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x67459315, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f00000001c0)=0x13df, 0x4) sendfile(r0, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000480)='./bus\x00', 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r14) 18:26:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001a80)=0x10) splice(r1, &(0x7f0000000400), r4, &(0x7f0000000440)=0xfffffffffffffffc, 0x48, 0x4000000008) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'irlan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r6) r7 = creat(&(0x7f00000002c0)='./file1\x00', 0x40) write$P9_RREAD(r5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) lgetxattr(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300)=""/119, 0x77) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000700)) fsync(r4) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000380)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getpgid(0xffffffffffffffff) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x1a1042, 0x0) ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000000600)) open(&(0x7f0000000540)='./file1\x00', 0x1, 0x11) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000740)) lstat(0x0, &(0x7f0000000640)) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4000000000001b9, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) [ 258.032761] input: syz1 as /devices/virtual/input/input324 18:26:43 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r5, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r6 = dup(r1) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) write$uinput_user_dev(r6, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x3fc, 0x0, 0xffffff7f}}, 0x2e) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x7a04, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 18:26:43 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r2, 0x40}, {r3}, {r2, 0x2070}, {r4, 0x1}, {r2}, {r2, 0x1000}, {r5, 0x19}, {r6, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r7 = dup(r2) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$ASHMEM_SET_SIZE(r7, 0x40047703, 0x5) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r0, r8, 0x0, 0x8000ffffffff) [ 258.770346] input: syz1 as /devices/virtual/input/input328 18:26:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0xc}}], 0xc}, 0x0) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x0) 18:26:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:44 executing program 1: bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="6744669800000000040000905481c07fd55b8c50ba01170003040000209f52afe9e4cfd07b5cf8cd9362139bcddfd20a87b6fb484996000000000000000386052de1fd2543a3b87367de10bc3de31b3a87a5e1c98b3be5d855cd04a27a3476d54c0970021397225e00000000000000005f050000000000000073f8044038b5776789aef960b7bdc9581ede01a4de8c8d4ecd65a1a1b3c8ccb90257ac0e96af105eaafdad13e5f579d061f763c7cbe053921ad68143bd9af900000000dc7bd9863eb3e1a9c2978061cfd73975e70c08c83ce5c735929018fe4f9e35d927dd113e47"], 0x1) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198) openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000280)) ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 18:26:44 executing program 4: bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="6744669800000000040000905481c07fd55b8c50ba01170003040000209f52afe9e4cfd07b5cf8cd9362139bcddfd20a87b6fb484996000000000000000386052de1fd2543a3b87367de10bc3de31b3a87a5e1c98b3be5d855cd04a27a3476d54c0970021397225e00000000000000005f050000000000000073f8044038b5776789aef960b7bdc9581ede01a4de8c8d4ecd65a1a1b3c8ccb90257ac0e96af105eaafdad13e5f579d061f763c7cbe053921ad68143bd9af900000000dc7bd9863eb3e1a9c2978061cfd73975e70c08c83ce5c735929018fe4f9e35d927dd113e47"], 0x1) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198) openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000280)) ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) [ 259.414271] input: syz1 as /devices/virtual/input/input333 18:26:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0xc}}], 0xc}, 0x0) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x0) 18:26:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001a80)=0x10) splice(r1, &(0x7f0000000400), r4, &(0x7f0000000440)=0xfffffffffffffffc, 0x48, 0x4000000008) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'irlan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r6) r7 = creat(&(0x7f00000002c0)='./file1\x00', 0x40) write$P9_RREAD(r5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) lgetxattr(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300)=""/119, 0x77) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000700)) fsync(r4) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000380)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getpgid(0xffffffffffffffff) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x1a1042, 0x0) ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000000600)) open(&(0x7f0000000540)='./file1\x00', 0x1, 0x11) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000740)) lstat(0x0, &(0x7f0000000640)) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4000000000001b9, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) 18:26:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000200)=0x1, 0x4) set_tid_address(&(0x7f0000000000)) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = getuid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x10, 0x7fff}, {0x9, 0xffff0001}], r2}, 0x18, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a0, 0x0}, 0xa0012120) 18:26:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001a80)=0x10) splice(r1, &(0x7f0000000400), r4, &(0x7f0000000440)=0xfffffffffffffffc, 0x48, 0x4000000008) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'irlan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r6) r7 = creat(&(0x7f00000005c0)='./file1\x00', 0x29) write$P9_RREAD(r5, 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)=@random={'user.', '\x00'}, &(0x7f0000000300)=""/119, 0x259) syz_emit_ethernet(0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/404], 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f00000002c0)) fsync(r4) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000380)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getpgid(0xffffffffffffffff) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r10, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r11, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$RTC_WKALM_RD(r10, 0x80287010, &(0x7f0000000580)) open(&(0x7f0000000540)='./file1\x00', 0x1, 0x11) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000001980)) lstat(0x0, &(0x7f0000000640)) socket$inet6(0xa, 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000301ffff0000eafffbdbdf2500000000"], 0x14}}, 0x0) 18:26:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)) gettid() r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) syz_open_procfs(r2, &(0x7f0000000500)='net/ip_tables_targets\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7ym\xd5^\x1e\x96\'^\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8Ft\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\x1e\a\x94\xdbs\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x2) r5 = dup3(r4, r3, 0x0) readv(r4, &(0x7f0000000580), 0x0) r6 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x604082) socket(0x1, 0x6, 0x51) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r8 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) dup3(r8, r7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00000000c0)) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r10, &(0x7f0000002b80)=[{&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000800)=""/151, 0x97}, {&(0x7f00000008c0)=""/51, 0x33}, {0xfffffffffffffffe}, {&(0x7f0000001b00)=""/59, 0x3b}, {&(0x7f0000001b40)=""/41, 0x29}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x9) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000001940)=ANY=[@ANYBLOB="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"/423], 0x18c) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000200)=0x0) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000000)) fcntl$setown(r10, 0x8, r11) ioctl$RTC_UIE_ON(r10, 0x7003) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setown(r13, 0x8, 0x0) r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r15 = socket$inet(0x2, 0x0, 0x201fffffffd) syncfs(r14) setsockopt$inet_tcp_int(r15, 0x6, 0x19, &(0x7f0000000100)=0x400, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0xaa001, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) clone(0x20207fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x8080f, 0x80000001) r16 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) close(r16) r17 = memfd_create(&(0x7f0000000900)='selinux(\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x5) ioctl$UI_END_FF_ERASE(r18, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) write$binfmt_elf32(r18, &(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64], @ANYRESHEX=r16, @ANYRES16=r16, @ANYRESHEX=r16], 0x36) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ppoll(0x0, 0xffffffffffffffda, 0x0, 0x0, 0xff63) fcntl$setstatus(r16, 0x4, 0x2000) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) read(r19, &(0x7f0000000700)=""/250, 0xffffffffffffffa5) sendfile(0xffffffffffffffff, r17, 0x0, 0xc000000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000380)=0x4) syz_open_procfs(r12, &(0x7f0000000280)='auxv\x00') 18:26:45 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000440)={0xfffffffffffffff7, 0x0, 0x2}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000480)={0x7}, 0x7) accept4$packet(0xffffffffffffffff, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000024c0)=0x14, 0x800) ioctl$TIOCCBRK(r2, 0x5428) socket$inet6(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0xe) pipe(0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x231}, 0x20) close(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000280)=@buf) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x31f, 0x10400003) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) setresuid(r5, r6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000040)=0xf5bc21a75929f757) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, [], 0x1a}, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x5c, r3, r7}, {0x2, 0x7, 0x800, 0x9, 0x1, 0x100000000, 0x6, 0x6}, {0x4, 0x6610, 0xffff, 0x6}, 0x3e0000, 0x6e6bbb, 0x4, 0x2241cae1031e7946}, {{@in=@multicast1, 0x4d6, 0x1769ff02dc515a81}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x0, 0x8b3afa2cdb354821, 0x0, 0x8, 0x3159, 0x40}}, 0xe8) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffeda) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r2, 0x0, 0x8000fffffffe) 18:26:46 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {r5, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r6 = dup(r1) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) write$uinput_user_dev(r6, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x3fc, 0x0, 0xffffff7f}}, 0x2e) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x7a04, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 18:26:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001a80)=0x10) splice(r1, &(0x7f0000000400), r4, &(0x7f0000000440)=0xfffffffffffffffc, 0x48, 0x4000000008) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'irlan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r6) r7 = creat(&(0x7f00000005c0)='./file1\x00', 0x29) write$P9_RREAD(r5, 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)=@random={'user.', '\x00'}, &(0x7f0000000300)=""/119, 0x259) syz_emit_ethernet(0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/404], 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f00000002c0)) fsync(r4) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000380)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getpgid(0xffffffffffffffff) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r10, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r11, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$RTC_WKALM_RD(r10, 0x80287010, &(0x7f0000000580)) open(&(0x7f0000000540)='./file1\x00', 0x1, 0x11) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000001980)) lstat(0x0, &(0x7f0000000640)) socket$inet6(0xa, 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000301ffff0000eafffbdbdf2500000000"], 0x14}}, 0x0) 18:26:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:46 executing program 2: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="12d9c7030a1d8950668267a2cb92ecf7232a9eac4b4a2f86533505459ed965be3fa354411c158a14241b49d7dd98e4cc912d71f91cfd1cc4606ae3e3b21a38bd939bcf85cb103c45c095bb2fa2"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000bc0)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @netrom, @default, @netrom, @rose, @rose, @rose]}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/107, 0x6b}, {0x0}], 0x3}}, {{&(0x7f0000000e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000001080)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f0000001100)=""/127, 0x7f}], 0x1, &(0x7f00000011c0)=""/93, 0x5d}, 0x7}], 0x3, 0x2, 0x0) getresuid(&(0x7f00000012c0), &(0x7f0000000000), &(0x7f0000001340)) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) r3 = socket$inet6(0x10, 0x80002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r5 = dup2(r4, r3) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000380)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) getpeername(r5, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000780)={&(0x7f0000000540), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xc0, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x831}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x844}, 0x40000) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r8, r8, &(0x7f0000000180)=0x74000000, 0x5) 18:26:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)) gettid() r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) syz_open_procfs(r2, &(0x7f0000000500)='net/ip_tables_targets\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7ym\xd5^\x1e\x96\'^\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8Ft\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\x1e\a\x94\xdbs\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x2) r5 = dup3(r4, r3, 0x0) readv(r4, &(0x7f0000000580), 0x0) r6 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x604082) socket(0x1, 0x6, 0x51) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r8 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) dup3(r8, r7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00000000c0)) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r10, &(0x7f0000002b80)=[{&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000800)=""/151, 0x97}, {&(0x7f00000008c0)=""/51, 0x33}, {0xfffffffffffffffe}, {&(0x7f0000001b00)=""/59, 0x3b}, {&(0x7f0000001b40)=""/41, 0x29}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x9) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000001940)=ANY=[@ANYBLOB="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"/423], 0x18c) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000200)=0x0) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000000)) fcntl$setown(r10, 0x8, r11) ioctl$RTC_UIE_ON(r10, 0x7003) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setown(r13, 0x8, 0x0) r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r15 = socket$inet(0x2, 0x0, 0x201fffffffd) syncfs(r14) setsockopt$inet_tcp_int(r15, 0x6, 0x19, &(0x7f0000000100)=0x400, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0xaa001, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) clone(0x20207fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x8080f, 0x80000001) r16 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) close(r16) r17 = memfd_create(&(0x7f0000000900)='selinux(\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x5) ioctl$UI_END_FF_ERASE(r18, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) write$binfmt_elf32(r18, &(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64], @ANYRESHEX=r16, @ANYRES16=r16, @ANYRESHEX=r16], 0x36) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ppoll(0x0, 0xffffffffffffffda, 0x0, 0x0, 0xff63) fcntl$setstatus(r16, 0x4, 0x2000) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) read(r19, &(0x7f0000000700)=""/250, 0xffffffffffffffa5) sendfile(0xffffffffffffffff, r17, 0x0, 0xc000000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000380)=0x4) syz_open_procfs(r12, &(0x7f0000000280)='auxv\x00') 18:26:46 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000440)={0xfffffffffffffff7, 0x0, 0x2}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000480)={0x7}, 0x7) accept4$packet(0xffffffffffffffff, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000024c0)=0x14, 0x800) ioctl$TIOCCBRK(r2, 0x5428) socket$inet6(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0xe) pipe(0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x231}, 0x20) close(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000280)=@buf) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x31f, 0x10400003) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) setresuid(r5, r6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000040)=0xf5bc21a75929f757) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, [], 0x1a}, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x5c, r3, r7}, {0x2, 0x7, 0x800, 0x9, 0x1, 0x100000000, 0x6, 0x6}, {0x4, 0x6610, 0xffff, 0x6}, 0x3e0000, 0x6e6bbb, 0x4, 0x2241cae1031e7946}, {{@in=@multicast1, 0x4d6, 0x1769ff02dc515a81}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x0, 0x8b3afa2cdb354821, 0x0, 0x8, 0x3159, 0x40}}, 0xe8) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffeda) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 261.413215] input: syz1 as /devices/virtual/input/input335 18:26:46 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000000280)="e1", 0xfffffffffffffe66, 0x0, 0x0, 0x1e6) splice(r1, 0x0, r0, 0x0, 0x2cfff, 0x0) 18:26:46 executing program 2: r0 = epoll_create(0xfffd) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 18:26:46 executing program 4: r0 = socket(0x1, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xff66, 0x0, 0x0, 0x0) r1 = gettid() setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) tkill(r1, 0x1000000000016) 18:26:46 executing program 4: r0 = socket(0x1, 0x1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = gettid() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0xfffffffffffffe8d) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, 0x0) tkill(r1, 0x1000000000016) 18:26:46 executing program 2: gettid() syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00\xe3\x03\xd6F\x93qJ\xcc\xfbn\x17\xdd]qC\xe1Bt\x9b0$\xb7\v\x80>\xf1\x9f\xc5\xc3|,\xd7>\xf0\xb3\x94\xb4x\x91%\x94@]\xd6\x0f>\xa01T\x81C\xf9\')l\x01X\xccg\xb2}\xc1%8DA^\x03g\x85\xf8\xd7\x9f\xdfyATGx\xab\r}\xcf\x94P>mY\xde\x8b91\xd5n\xfe\xa3\x9e\xfd\x85\xcd\x7f\xc2(\xb5\xbf\x84x\x98\x0f\x1b\x99\x04\x10\\l\xbe\xdcE\x8d;\x88\xa1\x93\xa0f\xac\xee\xe9\xed7a\xa5\xb7\xaf\t6\x8f(\x84C\'\x8eo\xa2\xf7\xfe<1\x9b\xc98\xc1bO\x13\x15\x7f8\xeap\x9f\xcb\xd9\x81\xc2\x9e\xcf\x17\xfc\x1a\x9e\xd7\xaaMP|%\xdf?\xdb\x98\xad\x00\xf5\xf0\x9a\xdb\x1cC:l\xab\x1b\n{4\x84\xdf\xb0jh\x01M\x9c\xcf`H\xd0w\xff)\x18\xd0\xe0N\xfc\x8fJ') write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xfffffffffffffd99) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 18:26:46 executing program 2: syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 18:26:47 executing program 5: r0 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6}) bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @xdp={0x2c, 0x14, r6, 0x5}, @ipx={0x4, 0x6, 0x3ff, "4fa771f74684", 0x5b}, @generic={0x8, "2c27ef01ce8ca7ba0450f9a694e4"}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='caif0\x00', 0x9bb, 0x7ff, 0x401}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0xffffffffffffffff, r8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in=@broadcast, 0x4e20, 0xfff, 0x4e21, 0x52, 0x2, 0x120, 0xcbf57236e8a7ee9c, 0x33, r7, r8}, {0x8, 0xca, 0xffffffffffffff04, 0xed, 0x7bb, 0x5, 0xa2, 0x9}, {0x9, 0x800, 0xffff, 0x2}, 0xffffffff, 0x6e6bba, 0x1, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d3, 0x2b}, 0x2, @in=@empty, 0x3506, 0x1, 0x2, 0x80, 0x100, 0x1, 0x2}}, 0xe8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9}, 0x20) 18:26:47 executing program 2: mknod(&(0x7f00000001c0)='./file0\x00', 0x200001040, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$unix(r2, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) tkill(r0, 0x16) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 18:26:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000180)={{0x77359400}, 0x17, 0x2, 0xa36b}, 0x10) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 18:26:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6}) bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @xdp={0x2c, 0x14, r6, 0x5}, @ipx={0x4, 0x6, 0x3ff, "4fa771f74684", 0x5b}, @generic={0x8, "2c27ef01ce8ca7ba0450f9a694e4"}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='caif0\x00', 0x9bb, 0x7ff, 0x401}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0xffffffffffffffff, r8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in=@broadcast, 0x4e20, 0xfff, 0x4e21, 0x52, 0x2, 0x120, 0xcbf57236e8a7ee9c, 0x33, r7, r8}, {0x8, 0xca, 0xffffffffffffff04, 0xed, 0x7bb, 0x5, 0xa2, 0x9}, {0x9, 0x800, 0xffff, 0x2}, 0xffffffff, 0x6e6bba, 0x1, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d3, 0x2b}, 0x2, @in=@empty, 0x3506, 0x1, 0x2, 0x80, 0x100, 0x1, 0x2}}, 0xe8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9}, 0x20) 18:26:47 executing program 4: getrandom(&(0x7f00000003c0)=""/234, 0xea, 0x2) 18:26:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x8db9) creat(0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) socketpair(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) r6 = socket(0x0, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 263.292709] input: syz1 as /devices/virtual/input/input338 18:26:48 executing program 5: gettid() tkill(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@md0='d0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 18:26:48 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@md0='d0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 18:26:48 executing program 4: syz_emit_ethernet(0x3a4, &(0x7f00000001c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "27d345", 0x36e, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast2, @remote, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @srh, @dstopts={0x0, 0x10, [], [@ra, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @generic={0x0, 0x69, "6f5bb1d800562eb7da3e61fc0d21e1d5fc0c5524c589233fae7bce79ba4d5c31ce9a17cf09d568d8c96e47d24a95bcacbc69e55d7348673071e23f30b96084f3f09f850af4cd1977d09e90ba622bed67a25f8626268b24230fa1e8c2b7113664ee67bb59074faac9b4"}]}], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc4, 0x0, [0x0], "0a011ea72ae711630d671e51b095401741bb0b134ff420655e0960cb2f5089aa51a703ada341e652135085603e3a9a6b990617e0827e3991b95c6d0fca2c925f2ef1cbe640d31acb835e6afd259aec5bc923b1a8835fa7015d04dba41c4b5a8824c35da06fcd93f09f2c8bfd75c586f2ddf707e05826e7ca192f79040535f2e312dc8517855d861103e7e2debacbcfad9508302da29b9b8c57e7e79d3c034bfa80cad003bbcd46588ebddf03881c50d3e297f0739c49747fe3a56ef53f7ea5027d5902c1"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0, 0x0], "c8792540fc092ffee654dd6751fc6faa78dfb10708352220eabac9cd023e3d69195294c58c4f447ccc207d13a246201dcb5a7f16940bbecf746f6a564e40703c2f889af4fe38dc5954b8cc4340645785a066ed43cb6c5fef64d53cc18aa43c355a48b978ccd3ef227c"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0], "b2273dcb4396ccae86401ab56af5d47b3af743d6e9e08c47478f8736e5516b28e87e79c4c5"}, {}, {}, {0x8, 0x6558, 0x0, "e96192dbe26a609abeee2fbb8bfbd6f8b53193581c63587ff9a9cc0c340d5996bcd7bb2aab98fc91d49ff1a3da854ef2a02953ec21303b94bd2e2ad536fd24ec0d2f968a4a2913bb5161585a931b7cfe9a4cdeb331c67731eca8f4d60f52706a3e14467c7ee79b84bc3bf3ddcca8cec2d151eb7140c801f8fe57d41681f816575b4cd8861dae8e92344d5c6d7e2669aa6f9f1280533a52869648e25bda6fae9b121d927130ceb9cba49217d25512d8cc80b17513f53ca5ddbc0a55464ec8a137f143eb4dd7477656122d7c9b999b1ee987c929c7a8c6343f53a8ecc6757c93db496a01d2ee6a2957f3e1ff40d6e1"}}}}}}}, &(0x7f0000000780)={0x1, 0x1, [0x3a3]}) 18:26:48 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x200001420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000704ab092506090007000aeb08de05000000020012ad210001", 0x5d) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:26:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) 18:26:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) close(0xffffffffffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000024c0)=[{0x0}, {&(0x7f00000011c0)=""/202, 0xca}, {0x0}, {0x0}, {&(0x7f0000001400)=""/57, 0x39}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/118, 0x76}], 0x7, &(0x7f0000002580)=""/23, 0x17}, 0x2}], 0x1, 0x0, &(0x7f0000002600)={0x0, 0x1c9c380}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) 18:26:48 executing program 2: mknod(&(0x7f00000001c0)='./file0\x00', 0x200001040, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$unix(r2, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) tkill(r0, 0x16) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 263.621036] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.639024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.674960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.697740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.722306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.745356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.767853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.777987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.788204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.798136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.815708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.825945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.846000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.875596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.885523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.895355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.905258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.918027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.927804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.937577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.947348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.957282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.967475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.977356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.987503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 263.997374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.008760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.018659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.035705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.051842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.061876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.071725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.081663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.095630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.105402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:48 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68", 0x4d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 18:26:48 executing program 0: gettid() write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) epoll_create1(0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0xf92f4a646b61be8c) 18:26:48 executing program 5: open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:26:48 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x0) [ 264.120063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.130443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.152897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.188588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.216492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.237875] input: syz1 as /devices/virtual/input/input340 18:26:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 264.261922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='1'], 0x1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r1, 0x4, 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) [ 264.333727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:49 executing program 2: [ 264.412646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.462557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.522699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.583141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 264.611401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x40000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101}) 18:26:49 executing program 0: 18:26:49 executing program 2: [ 264.641807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:49 executing program 5: 18:26:49 executing program 1: [ 264.934347] device lo entered promiscuous mode 18:26:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:49 executing program 5: 18:26:49 executing program 1: 18:26:49 executing program 2: 18:26:49 executing program 0: 18:26:49 executing program 5: 18:26:49 executing program 0: 18:26:50 executing program 4: 18:26:50 executing program 2: 18:26:50 executing program 1: 18:26:50 executing program 5: 18:26:50 executing program 0: 18:26:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) dup(r5) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:50 executing program 0: 18:26:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001985680c1ba3a20400ff7e280000005e00ffffba162441caf0da3b40c925234476d0b80ca0aa1c0009b3ebea8653b1cc7e6397", 0x4c}], 0x1}, 0x0) 18:26:50 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) 18:26:50 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000300)) 18:26:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:26:50 executing program 1: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), 0xff13) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000100)=""/188, 0xbc) syz_open_procfs(0x0, 0x0) socket(0x10, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0xffff}) 18:26:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0x28) 18:26:50 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x12rist\xe3cusgrVid:De', 0x0) 18:26:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect(r1, &(0x7f00000001c0)=@nl=@unspec, 0x80) close(r0) 18:26:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x4009}) 18:26:50 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R/rist\xe3cusgrVid:De', 0x0) 18:26:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r5, 0x40}, {r6}, {r5, 0x2070}, {r7, 0x1}, {r5}, {r5, 0x1000}, {r8, 0x19}, {r9, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r10, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:51 executing program 5: r0 = socket(0x1, 0x1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = gettid() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0xfffffffffffffe8d) getsockname$inet(r0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, 0x0) tkill(r1, 0x1000000000016) 18:26:51 executing program 1: open(0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) setpgid(r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) tkill(r0, 0x15) 18:26:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) 18:26:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x803, 0xa5) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 18:26:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) 18:26:51 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f00000000", 0x18}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:26:51 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/214, 0xd6}], 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 18:26:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) 18:26:51 executing program 5: r0 = socket(0x1, 0x1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = gettid() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0xfffffffffffffe8d) getsockname$inet(r0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, 0x0) tkill(r1, 0x1000000000016) 18:26:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xb8}) 18:26:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f"], 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:26:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000340)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r0}) 18:26:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r9, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:51 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, 0x0, 0x0) 18:26:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002680)=[{0x0, 0x2d, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [r0]}}], 0x18}], 0x4924924924922a7, 0x0) 18:26:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = timerfd_create(0x9, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) 18:26:52 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 18:26:52 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x800000) 18:26:52 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:26:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 18:26:52 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:26:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r9, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:52 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:26:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x20000001) 18:26:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 18:26:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000000c0)=""/3, &(0x7f0000000100)=0x3) 18:26:52 executing program 1: r0 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() get_robust_list(r2, &(0x7f0000000240)=0x0, &(0x7f0000000280)) 18:26:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/23, 0x17}, 0x2}], 0x1, 0x0, &(0x7f0000002600)={0x0, 0x1c9c380}) lseek(0xffffffffffffffff, 0xc2e, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) 18:26:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x4009}) 18:26:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() prlimit64(r3, 0x7, &(0x7f0000000000)={0x0, 0x8000}, 0x0) 18:26:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 18:26:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r8, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x88et?o@\x00uOgd\xe8\x00', 0x3502}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:26:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x9579}) 18:26:53 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x3ff, 0xfc8f, "78d1f753a28c663d0c75a114662ee2d80b41868fb226c0952936127ddd9b0600000012c6eca5c75fc9c2ff3394c42da4fbfcbc056a18ac999f7e5b8e7500000000"}) 18:26:53 executing program 4: 18:26:53 executing program 5: 18:26:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x12) sendfile(r1, r2, 0x0, 0x8000fffffffa) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:26:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x9579}) 18:26:53 executing program 2: 18:26:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x12) write$apparmor_exec(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:26:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x54, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x73}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x54}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x18) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0x101, 0x4) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402000c}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004000) 18:26:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 18:26:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r8, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:53 executing program 4: 18:26:53 executing program 4: 18:26:53 executing program 2: 18:26:53 executing program 4: [ 269.071716] audit: type=1326 audit(1575397613.731:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9119 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf77f6bf9 code=0x0 18:26:53 executing program 2: 18:26:53 executing program 4: 18:26:53 executing program 2: 18:26:53 executing program 4: 18:26:54 executing program 5: 18:26:54 executing program 0: 18:26:54 executing program 2: 18:26:54 executing program 4: 18:26:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r7, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:54 executing program 5: 18:26:54 executing program 1: [ 269.870890] audit: type=1326 audit(1575397614.531:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9119 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf77f6bf9 code=0x0 18:26:54 executing program 4: 18:26:54 executing program 5: 18:26:54 executing program 0: 18:26:54 executing program 1: 18:26:54 executing program 2: 18:26:54 executing program 4: 18:26:54 executing program 5: 18:26:54 executing program 1: 18:26:54 executing program 0: 18:26:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r7, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:55 executing program 2: 18:26:55 executing program 4: 18:26:55 executing program 5: 18:26:55 executing program 1: 18:26:55 executing program 0: 18:26:55 executing program 5: 18:26:55 executing program 2: 18:26:55 executing program 0: 18:26:55 executing program 4: 18:26:55 executing program 2: 18:26:55 executing program 1: 18:26:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r6, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:55 executing program 0: 18:26:55 executing program 4: 18:26:55 executing program 5: 18:26:55 executing program 1: 18:26:55 executing program 2: 18:26:55 executing program 5: 18:26:55 executing program 1: 18:26:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001940)="c1", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0xfff}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x3000)=nil, 0x9000}, &(0x7f00000000c0)=0x10) 18:26:55 executing program 0: perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:26:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa77ba05434ae286dd606c48a300142f00fe8000000000000000000000000000bbff0200000000000000000000000000013c0088be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], &(0x7f00000000c0)) 18:26:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x33, 0x0, 0x0}) 18:26:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r6, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:55 executing program 0: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) read(r0, 0x0, 0x0) 18:26:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='oom_adj\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r3, r2, 0x0, 0x1) 18:26:55 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80000000000802, 0x0) write(r0, &(0x7f00000003c0)="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", 0xfc) 18:26:55 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) signalfd(r0, 0x0, 0x0) 18:26:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001940)="c1", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0xfff}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x3000)=nil, 0x9000}, &(0x7f00000000c0)=0x10) 18:26:56 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9, 0x31aa}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket(0x200000100000011, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x80000001) dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)=0x83, 0x1fb) open(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r4}) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x4d, r6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0), 0xdd) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0xfffffffffffffffc) socket$key(0xf, 0x3, 0x2) 18:26:56 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) 18:26:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00deff01f2000000030005000016000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c8b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb824f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e831c15e786fda31a52255432f3e116927b0032c4b92b2858be830c16df808e815476cb4ce617d37df1b6d66c83313b4a15b6330e124aa5aa6592b3fc6520c311f5146bc3d0befe0ace6695ea852f6c1bc72d6364aa68487056acc6605ae3becef00080000d3b67547134de0f4d1145752985e469d2069b492b48a64a34204f23c3b70224908bc52460445cd436bdfac8e72070fb896025138a9307ff32700065d7a33bac39bbc0032f7a4869e156aed176d70c9e55b292cc857e823d6ca994420c7f1c333b02400"/514], 0x60}}, 0x0) 18:26:56 executing program 4: socketpair(0x10, 0x0, 0x3, &(0x7f0000000280)) r0 = eventfd(0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xf7395000) write$cgroup_type(r0, &(0x7f0000000540)='threaded\x00', 0x9) 18:26:56 executing program 2: setrlimit(0x9, &(0x7f0000000080)) io_setup(0x4, &(0x7f0000000140)) 18:26:56 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}, @igmp={0x0, 0x0, 0x0, @dev}}}}}, 0x0) 18:26:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r5, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:56 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000780)={@local, @random="0aeb000000e6", [], {@ipv6={0x86dd, {0x0, 0x6, "e300", 0x8, 0x2f, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x6558, 0x8}}}}}}, 0x0) 18:26:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x6c) gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)='P', 0x1, 0x10008000, 0x0, 0x0) close(r0) 18:26:56 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683540150024001b0000000000000000593ab782115ed9443d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x80802, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090868fe07002b00000001000a0013000000450300070300001419001a00120002000e00010003000300"/57, 0x39}], 0x1) 18:26:56 executing program 2: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x5c}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302", 0x11}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:26:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x14, 0x16, 0x701, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 18:26:56 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36", 0x2e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 18:26:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000280)={0xa, 0x5, {0x51, 0x0, 0x0, {}, {0x6c, 0x3ff}, @cond=[{0x6, 0x0, 0x6, 0x4a10, 0x101}, {0x80, 0x0, 0x0, 0x0, 0x7, 0x4}]}, {0x0, 0x38, 0x0, {0x9, 0x7}, {0x7ff, 0x5243}, @cond=[{0x0, 0x6, 0x0, 0x2, 0x7fff, 0x1f}, {0x0, 0x0, 0xe2, 0x7ff, 0x1}]}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') readv(r2, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:26:56 executing program 1: setpriority(0x0, 0x0, 0xfffffffffffffbff) 18:26:56 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683540150024001b0000000000000000593ab782115ed9443d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x80802, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090868fe07002b00000001000a0013000000450300070300001419001a00120002000e00010003000300"/57, 0x39}], 0x1) [ 271.994573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xe0) creat(0x0, 0x0) 18:26:56 executing program 4: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="632d75141840"], 0x6}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40020000000c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 272.049854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.083325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.166227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.188295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.199267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.209263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.219141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.236907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.258802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.278899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.301403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.323496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.343812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.365281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.375900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.386423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.396301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.406490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.416328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.426602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.436439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.446586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.456515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r5, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000280)={0xa, 0x5, {0x51, 0x0, 0x0, {}, {0x6c, 0x3ff}, @cond=[{0x6, 0x0, 0x6, 0x4a10, 0x101}, {0x80, 0x0, 0x0, 0x0, 0x7, 0x4}]}, {0x0, 0x38, 0x0, {0x9, 0x7}, {0x7ff, 0x5243}, @cond=[{0x0, 0x6, 0x0, 0x2, 0x7fff, 0x1f}, {0x0, 0x0, 0xe2, 0x7ff, 0x1}]}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') readv(r2, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:26:57 executing program 5: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x143042, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) 18:26:57 executing program 1: r0 = socket(0x1, 0x1, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() sendto(r0, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffe95) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1020000000016) [ 272.466708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.476841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.493496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.505534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.525347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.546232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.575195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.587813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.598819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.608840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.625973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.639483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.649885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.659676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.671041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.681304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.691452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.705534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.715480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.725767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.735912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.747602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.757531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.768017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.777918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.788336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.798708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.809577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.819538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.830000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.840064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.850409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.860579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.870853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.880881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.892363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.915428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x34) 18:26:57 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) dup2(r2, r1) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/62, 0x3e}], 0x1) 18:26:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r2, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010002, 0x0) 18:26:57 executing program 1: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 18:26:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {r4, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r5, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) [ 272.925162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 272.935038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:26:57 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 18:26:57 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) lseek(0xffffffffffffffff, 0x0, 0x4) 18:26:59 executing program 4: 18:26:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0xff, 0x40}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67b, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x80, 0x0}}], 0x400039d, 0x0) 18:26:59 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x15a) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) creat(&(0x7f00000000c0)='./file0\x00', 0x1) 18:26:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@local, @in=@remote}, {@in6=@local, 0x0, 0x33}, @in=@loopback}}}, 0xf8}, 0x8}, 0x0) 18:26:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='oom_adj\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r3, r2, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000b40)='oom_adj\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps\x00') sendfile(r4, r5, 0x0, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000b40)='oom_adj\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r7, r6, 0x0, 0x1) sendfile(r6, r7, &(0x7f0000000180), 0x3) 18:26:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r4, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:26:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 18:26:59 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 18:26:59 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x5cc9cedebbb048af) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) open(0x0, 0x0, 0x0) getpid() lseek(0xffffffffffffffff, 0x0, 0x4) fcntl$getown(0xffffffffffffffff, 0x9) [ 275.184503] syz-executor.1 (9386): /proc/9383/oom_adj is deprecated, please use /proc/9383/oom_score_adj instead. 18:26:59 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}], 0x2, 0xfffbc000) 18:26:59 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 18:26:59 executing program 0: 18:27:00 executing program 4: 18:27:00 executing program 5: 18:27:00 executing program 2: 18:27:00 executing program 1: 18:27:00 executing program 0: 18:27:00 executing program 5: 18:27:00 executing program 4: 18:27:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {r3, 0x1}, {r1}, {r1, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r4, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:00 executing program 1: 18:27:00 executing program 5: 18:27:00 executing program 4: 18:27:00 executing program 0: 18:27:00 executing program 2: 18:27:00 executing program 1: 18:27:00 executing program 5: 18:27:00 executing program 0: 18:27:00 executing program 4: 18:27:00 executing program 2: 18:27:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)={0x0, 0xfb, 0xd3, 0x2, 0x0, "1829f3f9eeb30f2e48e24fa675e35da7", "2584b5721a0ba2d1f249475346811c13a8c88f56dd7c6ede404fa9d4604a61d3af4f0ccefd3b4e92f660790ba1ea177042fd26581ad9165ab9a000f75b680ffe366c6f58f714a4a4243d07c8bf3fc77dc10051635971fb559594b237deaa8d7389f71cee93301e62ee58725cea84f53a9456c31e9dadad7ff195a7479a0f67d1a1d267f74431209e8f36c9aafa5bda1dafc4b3a3066fa60cf90786e40db6a4e45aea36e6e8cd12e92f1ee8b634b4fc3696467525b78e708486dc0c6d10e3"}, 0xd3, 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac05e11}) 18:27:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {0xffffffffffffffff, 0x1}, {r1}, {r1, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r3, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000003300)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)="a062", 0x2}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x20}}], 0x1, 0x0) 18:27:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) 18:27:01 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) socket$inet(0x2, 0x2, 0x1) open(0x0, 0x0, 0x0) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) 18:27:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, 0x0) 18:27:01 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 18:27:01 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, 0x0, 0x0) 18:27:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0xb3) ppoll(&(0x7f0000000100)=[{r2, 0x2002}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)) 18:27:01 executing program 0: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000440)) 18:27:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, 0x9) 18:27:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) [ 276.616023] IPv6: addrconf: prefix option has invalid lifetime [ 276.633731] IPv6: addrconf: prefix option has invalid lifetime 18:27:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r2}, {r1, 0x2070}, {0xffffffffffffffff, 0x1}, {r1}, {r1, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(r2, r3, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:01 executing program 4: creat(&(0x7f0000000400)='./bus\x00', 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', 0x0, 0x1008, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 18:27:01 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fremovexattr(r0, 0x0) 18:27:01 executing program 0: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000140)='./file0\x00', 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', 0x0, 0x0, 0x0) 18:27:01 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x143042, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 18:27:01 executing program 5: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x143042, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) 18:27:01 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4b, @mcast1}, 0x1c) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) 18:27:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r2, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x7843c471) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1fa0}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x15000000}, 0x100) 18:27:01 executing program 2: clone(0x1000000000011, &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, 0x0, 0x1000006, &(0x7f00000003c0)) 18:27:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x4, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x15e, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), 0x0, 0x0) 18:27:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="139e0d4a0000000099bf744307f631cd168c6337e4fa417f35c42a543a77d0f8abb4cabe6f1c07d7edc5faa880c53e71aa7fff6c2415c8dccc590000001507dd0181a7ec64c1d81d987983fb96fcef527c8060ece0308835ac20c62c43d025a77c0340ecaf42aea3f28bebb0e7a9acf652095a779c3b5f5fe85d312b2f771e84264dd918d6db80f5847360bfe028db73d8ded6744e4efbabb752288eacb832f15d761e94ece37fdfcc9224bfae4c899e6f2749732a9549d8266207000000551bda306b043ae105a7568117f55052910000000000000000"], 0xd7}}], 0x1, 0x40080) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000100)) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000002c0)) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='ecryptfs\x00', 0x0, &(0x7f0000000000)) 18:27:01 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x100000001, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) 18:27:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {}, {r1, 0x2070}, {0xffffffffffffffff, 0x1}, {r1}, {r1, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r2, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:02 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @random="c4a56420ae6a", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @remote, @broadcast, @dev}}}}, 0x0) 18:27:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x8db9) creat(0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 18:27:02 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @rand_addr="dda35b5ee0da527a2f35876a7fabb019"}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x1) 18:27:02 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 18:27:02 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 18:27:02 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000002240), &(0x7f0000000000)=0xfa100e85e19abfa) 18:27:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000280)=0x54) 18:27:02 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 18:27:02 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x18, 0x0, 0x0, @local, @rand_addr="cb24dab374060f4666cc9101250889ad", {[@routing={0x0, 0x0, 0x0, 0xfd, 0x1000000}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "59ff40", 0x0, "4f6096"}}}}}}}, 0x0) 18:27:02 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @empty}, 'vxcan1\x00'}) 18:27:02 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:27:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {}, {r1, 0x2070}, {0xffffffffffffffff, 0x1}, {r1}, {r1, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r2, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0xff, 0x40}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67b, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x80, 0x0}}], 0x400039d, 0x0) 18:27:03 executing program 2: r0 = socket$inet(0x2, 0x3, 0x15) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000e0000001ac1414c24e48b9c05da9a2070d6e5947a662e3f11b77f844f9bd8b953200c4ca34227c31f4d84bbfd703bfc3d87797da57982ccc30b545a248bcaf8193a42338e6d0095ffcfbe5b8b6b7274721c2618732211ef4b614ec6c83541fdc2959d8a2ee892a5f288eb54668c30a1a4871464ae6ea12"], 0x18) 18:27:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x8db9) sendfile(r1, r2, 0x0, 0x8000fffffffe) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) syz_open_dev$rtc(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:27:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x8db9) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 18:27:03 executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000040), 0x172) 18:27:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r2, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001580)=""/141, 0x8d}, {&(0x7f0000000500)=""/96, 0x60}], 0x2, &(0x7f0000001680)=""/20, 0x14}, 0x400}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001740)=""/49, 0x31}, {0x0}, {0x0}, {&(0x7f0000001980)=""/165, 0xa5}, {&(0x7f0000001a40)=""/63, 0x3f}, {0x0}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001f40)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x40010002, 0x0) 18:27:03 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x40541, 0x0) 18:27:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc4, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x73}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0xc4}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x18) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0x101, 0x4) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402000c}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004000) 18:27:03 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.stat\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x802, 0x0) write(r0, &(0x7f0000000200), 0x107) 18:27:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x2e7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:27:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r2, r2, 0x0, 0x4000005) 18:27:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000200)="e5", 0x1, 0x0, 0x0, 0x0) 18:27:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x2e7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:27:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x8db9) sendfile(r1, r2, 0x0, 0x8000fffffffe) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) syz_open_dev$rtc(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:27:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x2e7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:27:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x2e7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:27:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="ac"], 0x1) 18:27:04 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrandom(&(0x7f0000004400)=""/221, 0x332, 0x0) 18:27:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 18:27:04 executing program 1: 18:27:04 executing program 1: 18:27:04 executing program 1: 18:27:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:04 executing program 2: 18:27:04 executing program 1: 18:27:05 executing program 4: 18:27:05 executing program 5: 18:27:05 executing program 1: 18:27:05 executing program 0: 18:27:05 executing program 2: 18:27:05 executing program 2: 18:27:05 executing program 5: 18:27:05 executing program 1: 18:27:05 executing program 0: 18:27:05 executing program 1: 18:27:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:05 executing program 0: 18:27:05 executing program 4: 18:27:05 executing program 5: 18:27:05 executing program 2: 18:27:05 executing program 5: 18:27:05 executing program 1: 18:27:05 executing program 2: 18:27:05 executing program 0: 18:27:05 executing program 4: 18:27:05 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listxattr(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 18:27:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x4}) 18:27:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) 18:27:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) openat$full(0xffffffffffffff9c, &(0x7f0000006f80)='/dev/full\x00', 0x40000, 0x0) 18:27:06 executing program 4: 18:27:06 executing program 5: 18:27:06 executing program 1: 18:27:06 executing program 5: 18:27:06 executing program 4: 18:27:06 executing program 0: 18:27:06 executing program 1: 18:27:06 executing program 2: 18:27:06 executing program 5: 18:27:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:07 executing program 4: 18:27:07 executing program 1: 18:27:07 executing program 2: 18:27:07 executing program 0: 18:27:07 executing program 5: 18:27:07 executing program 1: 18:27:07 executing program 5: 18:27:07 executing program 0: 18:27:07 executing program 4: 18:27:07 executing program 2: 18:27:07 executing program 5: 18:27:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_create(0x0, 0x100000) 18:27:08 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) 18:27:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) close(0xffffffffffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000024c0)=[{0x0}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/202, 0xca}, {&(0x7f00000012c0)=""/190, 0xbe}, {0x0}], 0x6, &(0x7f0000002580)=""/23, 0x17}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000002640)=ANY=[]}) lseek(0xffffffffffffffff, 0xc2e, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:27:08 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000080)="0f13380e2a5207d0b8f2366daf68d4194e740fa10c20c33ae30682d0ae88eabf280fd34816a9cae2bc6a4fbc1d03cf69d6d0fa6c97db7e096391863f6d8e897819aca5cb574c7583dab5d5c3bfcd8d2729e53bafbd67923c644692616d9e2971d4cbf013a9f96cbdf4d996c164455f5499193f7af17ee9ef83491c0c9c500e23750dfc16ff89fa8dd642e2255354c96a6e870ede361d113c9262cf717c1e68e7ef5e8c274c2e762d82235fa05d5e0058dc897a80b693ec90c04e08", 0xbb}, {&(0x7f0000000140)="14fcb38ae2171152d6c3d533a1c8e308a69128ecf800d42a4d785ed3b9d58ea9bf295d7d4198b19dfda51f4976c693834d4a89b0baae016be93ca74aa4876daed9b4d2c609b058f9fc4e7b6914", 0x4d}, {&(0x7f00000001c0)="b437859739f97a0ebff302c9c57e0eb035e05cf90a86a342e937b420033b9a6762829170265339e8fb3e4fc09a22fe8de6aaf753e342e20c97ea5f041bbb5facf6b5911c2774cfb6d58e8d429a11c14e8fa3a46eb9d9265dea11d309e8a20783c7568421a1f98418961241edd4d4facef9f9ee974dcd468f771986dd7d931af91b69ad7abd0ba7038467e930d67da56229e7103441ff4d06a53020848e6238bf15b91610db9d00e12658b5b0e5fae0943ee5aaaf8756a8fdebdd996c5448ea456be3c5b2", 0xc4}, {&(0x7f00000002c0)="58bb4bf773b06283d64e84fa058b8f673393376571795942d31d83e2edb75f8f27139342933f7fe1e14525c21f33a191806c16ce093e1d3720639daac1a8da5a944732bd18d5ae880139f038250f855ed583639c833481d3ebed75a8a13a4ca3af5b2fbff59a661625c4b80b0f2d19434093de63022c38c411b5815356d02645e83e2df8859988e2f36706c8c92b52c7d6", 0x91}, {&(0x7f0000000380)="c3af49799668dd18b40fc5fae998ce1756d9962bf242ef66586ab8a34efb527c91a9f1d8ca38d0c9e904e4a9c598dbaa0c1deb21a4723515524614581c875e1dbef3964a338953cc4ce3fe66df430a77b3e6fc016230ea84062384976d9f1b314b724a403fe8d7feea2979d492ed6e27b678f198f868e0f1c2c98dc38be5918eda", 0x81}, {&(0x7f0000000440)="4c41bd0b09e4c1ac7970259a35e3f678aaba0de16e15048e065596b6a2339cdee23922ae3c9fe9357e112d64d62d626a4b1c16278cd8ba2d30581c655ee0b8b72e9361dc3026e3afac4ee1365559c22a93144af3e939eceaa0547b7936bb2de9646f4d69c5bd2e852c7d3a2808899ae79ec688485d07291f4236ba960dd9d94d962bec9d02c2a66187ca89574742bdfaae76c4d6223bb308e3214cee1b9173fd8d74d4608daca3a09e8d4a1217b3a87fbf742f24ad2c", 0xb6}, {&(0x7f0000000000)="b0f7dfc5c77c97185903513dc715ca2eab14a0b7cfb5e5d9d72ec18625095c51f116135f56ee7fc8b9b50b2600a89d2d7fe10805206d193939d76f4cb770084b", 0x40}, {&(0x7f0000000500)="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", 0x599}], 0x8, 0x693) 18:27:08 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x68002100, 0x0, 0x0, 0x0, 0x0) 18:27:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed7", 0x36}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:27:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) 18:27:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 18:27:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 18:27:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) 18:27:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) 18:27:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:09 executing program 2: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x80000001}) 18:27:09 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000340)='asymmetric\x00', &(0x7f00000002c0)=@secondary='builtin_and_secondary_trusted\x00') 18:27:09 executing program 1: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000180)={{0x0, @broadcast, 0x0, 0x0, 'sh\x00', 0x0, 0xe31}, {@multicast2, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x44) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x80000000010, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000002) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) stat(0x0, &(0x7f0000000140)) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@rand_addr="5b6bd64597989c489ec8d8a16320ea05", @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x0, 0x100000000001, 0x7f}, {0x80000000}, 0x13c, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x9, @in=@rand_addr=0x40, 0x0, 0x2, 0x0, 0x1f, 0x0, 0x3ff}}, 0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lsetxattr$system_posix_acl(0x0, &(0x7f0000001680)='system.posix_acl_default\x00', &(0x7f0000001700)=ANY=[@ANYBLOB="02000000010001000000000004000600000000eb08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x8, 0x0) epoll_create1(0x80000) 18:27:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0], 0x24}, 0x0) 18:27:09 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 18:27:09 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 18:27:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000c}) 18:27:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) 18:27:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) 18:27:11 executing program 4: open(0x0, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 18:27:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 18:27:11 executing program 1: pipe(0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) 18:27:11 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 18:27:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:11 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x143042, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 18:27:11 executing program 1: 18:27:11 executing program 0: 18:27:11 executing program 1: 18:27:11 executing program 5: 18:27:11 executing program 0: 18:27:11 executing program 4: 18:27:11 executing program 1: 18:27:11 executing program 0: 18:27:11 executing program 2: 18:27:11 executing program 5: 18:27:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:12 executing program 4: 18:27:12 executing program 1: 18:27:12 executing program 0: 18:27:12 executing program 5: 18:27:12 executing program 2: 18:27:12 executing program 4: 18:27:12 executing program 1: 18:27:12 executing program 5: 18:27:12 executing program 0: 18:27:12 executing program 2: 18:27:12 executing program 1: 18:27:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:13 executing program 4: 18:27:13 executing program 5: 18:27:13 executing program 2: 18:27:13 executing program 0: 18:27:13 executing program 1: 18:27:13 executing program 0: 18:27:13 executing program 1: 18:27:13 executing program 4: 18:27:13 executing program 5: 18:27:13 executing program 2: 18:27:13 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="230000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 18:27:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:14 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\x00;', 0x38, 0xffffff3a, 0x0, @dev, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "0b8bde", 0x0, 0x6, 0x0, @mcast2, @mcast2, [], "196d381e33cf73f6"}}}}}}}, 0x0) 18:27:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080), 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000740)="0805b5055e0bcfe8475071") 18:27:14 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={'bond0\x00\xe1\x03z\x00!!S\x01\x00', @ifru_names='bond_slave_1\x00\x00\x003'}) 18:27:14 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d46", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @rand_addr="dda35b5ee0da527a2f35876a7fabb019"}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x1) 18:27:14 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) clone(0x1000500002c100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() exit(0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x180) socket(0x10, 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 18:27:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socketpair$unix(0x1, 0x0, 0x0, 0x0) 18:27:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="0d00000000003639408fa3a3ba27660199159dffcf1e7feef541a3d2ed47be4a5d98d40b25218605ba97f593ecb4fafc822dfc9d35b2783dda1b0816722db3c91e6d5401790c01a40fe1b4be51d2d59c24e07d5f1991a298f71d69f0c8c4435cde565686eb23fe924640f2c3db27c596cb539a0749378e776a557a2c9386e84fe0b7e51226e430cc325358892100faca908bb7d45dabb66c1008613e367307c7b8380b6e3ad7e6f40d982ae831829c406c1519bcf85818e8e236389208d744e18a7402c3ef0b49602e33", 0xca}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:27:14 executing program 4: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 18:27:14 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x100000118}, 0x0) [ 289.541462] audit: type=1400 audit(1575397634.201:28): avc: denied { ioctl } for pid=10018 comm="syz-executor.5" path="socket:[36438]" dev="sockfs" ino=36438 ioctlcmd=8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:27:14 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f3646023443", 0x32}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 18:27:14 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='smaps\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0xd88) ioctl$TCSETAW(r0, 0x5407, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) memfd_create(&(0x7f0000000280)='\x00', 0x0) 18:27:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:15 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:27:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) 18:27:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002680)=[{0x0, 0x2d, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [r2]}}], 0x18}], 0x4924924924922a7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:27:15 executing program 4: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, [0xfdffffff]}) 18:27:15 executing program 2: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdffffff]}]}) 18:27:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:27:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x2, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x2, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 18:27:15 executing program 0: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000140)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$unix(0x1, 0x1, 0x0) ptrace(0x11, r0) 18:27:15 executing program 2: sendmsg$inet(0xffffffffffffffff, 0x0, 0x205e76788a6b41b3) 18:27:15 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000c80), 0x8) write(r0, 0x0, 0x0) 18:27:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) 18:27:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x70, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff921b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x11, 0x0, 0x27) 18:27:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 18:27:15 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d46", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @rand_addr="dda35b5ee0da527a2f35876a7fabb019"}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="30000000000000000000000000000000048d1a3bc7c2bc9d493ae37366cf91d13b1bfab05a89de13018000000db0"], 0x2e}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x1) 18:27:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 18:27:15 executing program 5: r0 = open$dir(&(0x7f0000000800)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r0, 0x0) 18:27:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x14, 0x3, 0x8, 0xffffffffffffffff}, 0x14}, 0x1, 0xf000}, 0x0) 18:27:16 executing program 0: 18:27:16 executing program 1: 18:27:16 executing program 1: 18:27:16 executing program 5: 18:27:16 executing program 0: 18:27:16 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r0, 0x80000001, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x4000224, 0x0) 18:27:16 executing program 4: 18:27:16 executing program 5: 18:27:16 executing program 1: 18:27:16 executing program 0: 18:27:16 executing program 2: 18:27:16 executing program 1: 18:27:16 executing program 5: 18:27:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) syz_open_procfs(0x0, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) write(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) fcntl$setstatus(r0, 0x4, 0x2800) 18:27:16 executing program 0: 18:27:16 executing program 2: 18:27:16 executing program 5: 18:27:17 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r0, 0x80000001, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x4000224, 0x0) 18:27:17 executing program 1: 18:27:17 executing program 0: 18:27:17 executing program 5: 18:27:17 executing program 2: 18:27:17 executing program 4: 18:27:17 executing program 5: 18:27:17 executing program 4: 18:27:17 executing program 2: 18:27:17 executing program 0: 18:27:17 executing program 4: 18:27:17 executing program 1: 18:27:18 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r0, 0x80000001, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x4000224, 0x0) 18:27:18 executing program 1: 18:27:18 executing program 4: 18:27:18 executing program 2: 18:27:18 executing program 5: 18:27:18 executing program 0: 18:27:18 executing program 5: 18:27:18 executing program 2: 18:27:18 executing program 0: 18:27:18 executing program 4: 18:27:18 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='smaps\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0xd88) 18:27:18 executing program 5: setitimer(0x0, &(0x7f00000000c0)={{0x0, 0x1ff}, {0x4000001000000, 0x2}}, 0x0) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000000000000000000010000000000000000000000000000000744a9f29bdc363076b15395c3b6beeff2cb282469a9d09fe5717544440f34691f87b06ec571c6c09974f83ffa52980ae5f1363f13545ad571c03a6e22d93ea71ed28a4c080d08f1a8756"], 0x20}, 0x0) 18:27:19 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:19 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0) 18:27:19 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000f2cff4)={0x53481b91e1a95fbd}) 18:27:19 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x202, 0x0) write$P9_RWRITE(r0, 0x0, 0x33a) 18:27:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@remote, @in=@broadcast}]}, 0x38}}, 0x0) 18:27:19 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='smaps\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0xd88) 18:27:19 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='smaps\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0xd88) socket(0x0, 0x0, 0x0) 18:27:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x0, &(0x7f0000000100)=@abs, 0x930212) 18:27:19 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000f2cff4)={0x53481b91e1a95fbd}) 18:27:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$tipc(0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:27:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x0) sendfile(r0, r2, 0x0, 0x20020102000007) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 18:27:19 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0xb, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") syz_emit_ethernet(0xc0, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) 18:27:20 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='smaps\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0xd88) socket(0x0, 0x0, 0x0) 18:27:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x0) sendfile(r0, r2, 0x0, 0x20020102000007) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 18:27:20 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:20 executing program 2: r0 = memfd_create(&(0x7f0000000200)='eth0ppp1\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000d00)='smaps\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) sendfile(r3, r1, 0x0, 0xd88) socket(0x10, 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, 0x0) pwritev(r0, 0x0, 0x0, 0x81000) memfd_create(&(0x7f0000000280)='\x00', 0x0) 18:27:20 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="0d00000000003639408fa3a3ba27660199159dffcf1e7feef541a3d2ed47be4a5d98d40b25218605ba97f593ecb4fafc822dfc9d35b2783dda1b0816722db3c91e6d5401790c01a40fe1b4be51d2d59c24e07d5f1991a298f71d69f0c8c4435cde565686eb23fe924640f2c3db27c596cb539a0749378e776a557a2c9386e84fe0b7e51226e430cc325358892100faca908bb7d45dabb66c1008613e367307c7b8380b6e3ad7e6f40d982ae831829c406c1519bcf85818e8e236389208d744e18a7402c3ef0b49602e33408d1f30581894ef44f1b510213b39434950aeb434f411813312ae", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:27:20 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) 18:27:20 executing program 4: r0 = getpid() prlimit64(r0, 0x0, 0x0, &(0x7f00000001c0)) 18:27:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68", 0x4d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:27:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957a", 0x49}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:27:20 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x3}) 18:27:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='smaps\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0xd88) 18:27:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:27:20 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x62, 0x0) 18:27:20 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 18:27:21 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:21 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 18:27:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe6l\xf6\x11\x1a\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8b\xaf\xf0\x1ey\x03\x00\x00\x00\xfd\x00'/75, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40286608, 0x0) 18:27:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x2203}) 18:27:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 18:27:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x20}) 18:27:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10}], 0x10}, 0x0) 18:27:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x2e7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:27:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) 18:27:21 executing program 1: 18:27:21 executing program 1: 18:27:21 executing program 0: 18:27:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:22 executing program 2: 18:27:22 executing program 0: 18:27:22 executing program 4: 18:27:22 executing program 1: 18:27:22 executing program 5: 18:27:22 executing program 2: 18:27:22 executing program 4: 18:27:22 executing program 1: 18:27:22 executing program 0: 18:27:22 executing program 5: 18:27:22 executing program 2: 18:27:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:23 executing program 4: 18:27:23 executing program 5: 18:27:23 executing program 1: 18:27:23 executing program 0: 18:27:23 executing program 2: 18:27:23 executing program 0: 18:27:23 executing program 2: 18:27:23 executing program 1: 18:27:23 executing program 5: 18:27:23 executing program 4: 18:27:23 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x7, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 18:27:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:24 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) 18:27:24 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sel\x01\x00attcurrent\x00', 0x2, 0x0) 18:27:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') finit_module(r0, 0x0, 0x0) 18:27:24 executing program 2: syslog(0x3, &(0x7f0000000000)=""/81, 0x51) 18:27:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db", 0xf}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) 18:27:24 executing program 4: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x5000004, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x1600bd7c, 0x0, &(0x7f0000000000)) 18:27:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) getresuid(0x0, &(0x7f00000000c0), &(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320c) 18:27:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@generic={0x0, 0x2}]}}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x5, 0x90a443025eb162d0}}}}}}, 0x0) 18:27:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)) 18:27:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) getresuid(0x0, &(0x7f00000000c0), &(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320c) 18:27:24 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 18:27:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f0000000000)) 18:27:24 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 18:27:24 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0xfffffffffffffffe) 18:27:24 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x3) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x718000) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 18:27:27 executing program 0: 18:27:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x1, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) 18:27:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$RTC_UIE_ON(r1, 0x7003) 18:27:27 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x113042, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x3ba) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) 18:27:27 executing program 5: 18:27:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:27 executing program 5: 18:27:27 executing program 2: 18:27:27 executing program 1: 18:27:27 executing program 0: 18:27:27 executing program 4: 18:27:27 executing program 5: 18:27:27 executing program 2: 18:27:27 executing program 1: 18:27:27 executing program 0: 18:27:27 executing program 4: 18:27:27 executing program 5: 18:27:27 executing program 0: 18:27:27 executing program 1: 18:27:27 executing program 2: 18:27:27 executing program 4: 18:27:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:27 executing program 5: 18:27:27 executing program 2: 18:27:27 executing program 0: 18:27:27 executing program 4: 18:27:27 executing program 5: 18:27:27 executing program 1: 18:27:27 executing program 2: 18:27:27 executing program 0: 18:27:27 executing program 4: 18:27:27 executing program 5: 18:27:27 executing program 1: 18:27:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:28 executing program 2: 18:27:28 executing program 0: 18:27:28 executing program 4: 18:27:28 executing program 5: 18:27:28 executing program 1: 18:27:28 executing program 0: 18:27:28 executing program 2: 18:27:28 executing program 4: 18:27:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) 18:27:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x6) 18:27:28 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_channels={0x7}}) 18:27:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:29 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 18:27:29 executing program 0: socket(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = gettid() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0xfffffffffffffe8d) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, 0x0) tkill(r0, 0x1000000000016) 18:27:29 executing program 5: open(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = gettid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) tkill(r0, 0x1000000000016) 18:27:29 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000380)) 18:27:29 executing program 2: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\a', 0x1, 0x0, 0x0, 0x0) 18:27:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) execve(&(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0) 18:27:29 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x113042, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x3ba) ioctl$TCSETX(r0, 0x5433, 0x0) 18:27:29 executing program 4: r0 = gettid() openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x680800, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socket$inet_udp(0x2, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) munlockall() tkill(r0, 0x1000000000016) 18:27:29 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0xbbe0e7f8ab30b682}}) 18:27:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) 18:27:30 executing program 2: creat(0x0, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000440)) 18:27:30 executing program 0: 18:27:30 executing program 1: 18:27:30 executing program 5: [ 305.903853] binder: 10666:10670 DecRefs 0 refcount change on invalid ref 0 ret -22 18:27:30 executing program 1: 18:27:30 executing program 0: 18:27:30 executing program 4: 18:27:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:31 executing program 5: 18:27:31 executing program 1: 18:27:31 executing program 4: 18:27:31 executing program 0: 18:27:31 executing program 2: creat(0x0, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000440)) 18:27:31 executing program 0: 18:27:31 executing program 5: 18:27:31 executing program 4: 18:27:31 executing program 1: 18:27:31 executing program 5: 18:27:31 executing program 4: 18:27:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:32 executing program 0: 18:27:32 executing program 1: 18:27:32 executing program 5: 18:27:32 executing program 4: 18:27:32 executing program 2: 18:27:32 executing program 2: 18:27:32 executing program 0: 18:27:32 executing program 5: 18:27:32 executing program 1: 18:27:32 executing program 4: 18:27:32 executing program 2: 18:27:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:33 executing program 0: 18:27:33 executing program 1: 18:27:33 executing program 4: 18:27:33 executing program 5: 18:27:33 executing program 2: 18:27:33 executing program 0: 18:27:33 executing program 4: 18:27:33 executing program 1: 18:27:33 executing program 2: 18:27:33 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") sendmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff73, &(0x7f0000000100)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 18:27:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x4000200, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x84c20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r5}, 0x3c) sendto$inet6(r0, &(0x7f0000000100)="05030e0040383e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) [ 308.766153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:27:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f00000004c0)='1', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:27:34 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'nat\x00'}, &(0x7f0000000100)=0x54) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r3, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000140)={'veth0_to_hsr\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91d3, 0x0, @perf_config_ext={0xa23e, 0x9}, 0x200020000, 0x2, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x10) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 18:27:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="5001000010001307000000000000000000000000000000f71300000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000e59b133cc78cecc57debbcd162da13cd1a1514ae"], 0x150}}, 0x0) 18:27:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0) 18:27:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 18:27:34 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9, 0x31aa}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) r3 = socket(0x200000100000011, 0x2, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0x21ab817d868be393, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r1) sendfile(r5, r6, 0x0, 0x80000001) r7 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000380)=0x83, 0x1fb) r8 = open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) ftruncate(r8, 0x2007fff) memfd_create(&(0x7f0000000240)='.^\x00', 0x0) r9 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r11, r11, &(0x7f00000002c0)=0x202, 0xdd) r12 = open(&(0x7f0000000500)='.\x00', 0x0, 0x0) close(r12) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r13}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r13}) bind$packet(r10, &(0x7f00000012c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xfffffffffffffdbb) lseek(r9, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r2, r10, &(0x7f0000000040), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x4d, r15}) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r16 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r17, 0xffffffffffffffff, &(0x7f00000002c0), 0xdd) getpeername$packet(r17, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) sendfile(0xffffffffffffffff, r16, 0x0, 0xfffffffffffffffc) r18 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r18, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x403, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @remote}}}, @sadb_key={0x4, 0x9, 0xa0, 0x0, "015422f57bbb07d97cf74dc65e987b51b087e446"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0d}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x90}}, 0x0) sendfile(r10, r0, &(0x7f0000000040), 0x8000fffffffe) 18:27:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r2, &(0x7f00000002c0)=0x202, 0xdd) 18:27:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x400, 0x36) 18:27:34 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4) 18:27:34 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000740)="0805b5055e0bcfe8475071") r1 = socket$packet(0x11, 0x100000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev, [{}], {@ipv6={0x86dd, {0x0, 0x6, "0200", 0x1c, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[@hopopts], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:27:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0xa}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:27:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0) 18:27:35 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "f7a7913f0cddc4ea1ed5013b731a0478b62460b3b230bdb702325acb025df828", "e2a8390f4308a1e9f7bdd858a9601712d690cee8ef9d07ebaf0561abfd17541a", "898319cbd43dfece7cbaf2d4340991a8f25af3b78c097687336e41648f3f17e7", "239fb96c2111e195b7c639f960035d9da46ac6fd435739165099a0246853c1f3", "1002d9a406e651ffa2fd254444a5a657f9a2682be45c32d3ba8e83df60973ebc", "52d1ec2909aa7ee5200b7ca7"}}) 18:27:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x16c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 18:27:35 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9, 0x31aa}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) r3 = socket(0x200000100000011, 0x2, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0x21ab817d868be393, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r1) sendfile(r5, r6, 0x0, 0x80000001) r7 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000380)=0x83, 0x1fb) r8 = open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) ftruncate(r8, 0x2007fff) memfd_create(&(0x7f0000000240)='.^\x00', 0x0) r9 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r11, r11, &(0x7f00000002c0)=0x202, 0xdd) r12 = open(&(0x7f0000000500)='.\x00', 0x0, 0x0) close(r12) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r13}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r13}) bind$packet(r10, &(0x7f00000012c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xfffffffffffffdbb) lseek(r9, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r2, r10, &(0x7f0000000040), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x4d, r15}) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r16 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r17, 0xffffffffffffffff, &(0x7f00000002c0), 0xdd) getpeername$packet(r17, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) sendfile(0xffffffffffffffff, r16, 0x0, 0xfffffffffffffffc) r18 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r18, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x403, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @remote}}}, @sadb_key={0x4, 0x9, 0xa0, 0x0, "015422f57bbb07d97cf74dc65e987b51b087e446"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0d}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x90}}, 0x0) sendfile(r10, r0, &(0x7f0000000040), 0x8000fffffffe) 18:27:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0xa}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:27:35 executing program 0: ppoll(&(0x7f0000000040)=[{}], 0x0, 0x0, 0x0, 0xfffffffffffffee8) 18:27:35 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x100000001, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write$9p(r0, 0x0, 0x0) 18:27:35 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 18:27:35 executing program 2: 18:27:35 executing program 2: 18:27:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) sendfile(r3, r0, &(0x7f0000000080)=0x400, 0x36) 18:27:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:36 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9, 0x31aa}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) r3 = socket(0x200000100000011, 0x2, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0x21ab817d868be393, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r1) sendfile(r5, r6, 0x0, 0x80000001) r7 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000380)=0x83, 0x1fb) r8 = open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) ftruncate(r8, 0x2007fff) memfd_create(&(0x7f0000000240)='.^\x00', 0x0) r9 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r11, r11, &(0x7f00000002c0)=0x202, 0xdd) r12 = open(&(0x7f0000000500)='.\x00', 0x0, 0x0) close(r12) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r13}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r13}) bind$packet(r10, &(0x7f00000012c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xfffffffffffffdbb) lseek(r9, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r2, r10, &(0x7f0000000040), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x4d, r15}) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r16 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r17, 0xffffffffffffffff, &(0x7f00000002c0), 0xdd) getpeername$packet(r17, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) sendfile(0xffffffffffffffff, r16, 0x0, 0xfffffffffffffffc) r18 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r18, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x403, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @remote}}}, @sadb_key={0x4, 0x9, 0xa0, 0x0, "015422f57bbb07d97cf74dc65e987b51b087e446"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0d}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x90}}, 0x0) sendfile(r10, r0, &(0x7f0000000040), 0x8000fffffffe) 18:27:36 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10) close(r0) 18:27:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x5}, 0x20c) 18:27:36 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) accept4(r0, 0x0, 0x0, 0x0) close(r1) 18:27:36 executing program 0: 18:27:36 executing program 5: 18:27:36 executing program 5: 18:27:36 executing program 0: 18:27:36 executing program 2: 18:27:36 executing program 0: 18:27:36 executing program 5: 18:27:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:36 executing program 2: 18:27:36 executing program 0: 18:27:36 executing program 5: 18:27:36 executing program 4: 18:27:36 executing program 1: 18:27:36 executing program 1: 18:27:36 executing program 0: 18:27:36 executing program 4: 18:27:36 executing program 2: 18:27:36 executing program 5: 18:27:36 executing program 0: 18:27:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:37 executing program 5: 18:27:37 executing program 1: 18:27:37 executing program 0: 18:27:37 executing program 2: 18:27:37 executing program 4: 18:27:37 executing program 5: 18:27:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c134108fe74950f9b93a5ea0cee7257225501bfbd9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002c7cd466eb935812a2d3e432b9ce916a7036c13c8b86314219123c233beca448dd"], 0xa8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = gettid() tkill(r3, 0x10010000000032) 18:27:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrandom(&(0x7f00000003c0)=""/234, 0xea, 0x2) 18:27:37 executing program 5: creat(&(0x7f0000000300)='./bus\x00', 0x0) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x0, 0x0) 18:27:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 18:27:38 executing program 1: 18:27:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @local={0xac, 0x14, 0xffffffffffffffff}, {[@timestamp={0x44, 0x4}]}}, @udp={0x0, 0x0, 0xc, 0x0, [@guehdr={0x1}]}}}}}, 0x0) 18:27:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x6, 0x64}}) 18:27:38 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 18:27:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) syz_genetlink_get_family_id$ipvs(0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) 18:27:39 executing program 5: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) 18:27:39 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f", 0x7}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:27:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x5, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee) 18:27:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='#'], 0x1) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f922f65ac618ded89748f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x4000000, 0x0, 0xfffffffffffffd99) [ 315.037624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="24000000200007041dfffd946f610500020000001f00000000000800050016000400ff7e", 0x24}], 0x1}, 0x0) [ 315.079364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.109084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 315.140305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.157556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.177521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.222874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.253539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.277541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 18:27:40 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 315.340056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.373853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.397308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:40 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f086", 0x9b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) [ 315.465911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.482436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.504923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.534488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.562583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.578482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.588861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.598942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.609116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.619641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.630103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.640162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.650294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.660324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.670485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.680440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.690604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.700785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.710748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.720793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:40 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ftruncate(r0, 0x48280) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) socket$inet6(0xa, 0x800, 0x0) time(0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:27:40 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:40 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="0d00000000003639408fa3a3ba27660199159dffcf1e7feef541a3d2ed47be4a5d98d40b25218605ba97f593ecb4fafc822dfc9d35b2783dda1b0816722db3c91e6d5401790c01a40fe1b4be51d2d59c24e07d5f1991a298f71d69f0c8c4435cde565686eb23fe924640f2c3db27c596cb539a0749378e776a557a2c", 0x7c}], 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 315.730844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.741564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.752175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.762320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.783832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.802389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.812732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.839398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.852093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.866212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.876208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.903740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.930735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f", 0x7}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:27:40 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xa5cc554) 18:27:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x1}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000002dd, 0x0) [ 315.954995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 315.965382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:40 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000100)="0100000003000600000776240a52387d", 0x8d) [ 316.110103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.140536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:40 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 316.167806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.207301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:40 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000100)="0100000003000600000776240a52387d", 0x8d) [ 316.231748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.275343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.302222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:41 executing program 1: [ 316.324993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.365178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:41 executing program 1: [ 316.402600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.446417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.488539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.511885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.534555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.556115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.579044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:41 executing program 1: 18:27:41 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 316.609035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:41 executing program 1: [ 316.651697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.703029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.745828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.770963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.792952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.815903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.858080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.896079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.906903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.918542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.928435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.938625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 316.948402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:41 executing program 2: 18:27:41 executing program 1: 18:27:41 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:41 executing program 5: 18:27:41 executing program 0: 18:27:41 executing program 0: 18:27:41 executing program 5: [ 316.958103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:41 executing program 1: 18:27:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:42 executing program 2: 18:27:42 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x34fd8a05}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40048010}, 0x4000000) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) socket$inet6(0xa, 0x800, 0x3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 18:27:42 executing program 5: 18:27:42 executing program 1: 18:27:42 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:42 executing program 2: 18:27:42 executing program 5: 18:27:42 executing program 1: 18:27:42 executing program 5: 18:27:42 executing program 1: 18:27:42 executing program 2: 18:27:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:43 executing program 5: 18:27:43 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:43 executing program 0: 18:27:43 executing program 2: 18:27:43 executing program 1: 18:27:43 executing program 0: 18:27:43 executing program 1: 18:27:43 executing program 2: 18:27:43 executing program 5: 18:27:43 executing program 0: 18:27:43 executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 18:27:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:44 executing program 5: io_setup(0x3, &(0x7f0000000100)=0x0) r1 = epoll_create1(0x0) io_submit(r0, 0x1, &(0x7f0000000d80)=[&(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 18:27:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x3c25956b) r4 = socket$inet(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x71d000) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") splice(r1, 0x0, r4, 0x0, 0x8001, 0x0) 18:27:44 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 18:27:44 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffc2) 18:27:44 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)='\f', 0x2e7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:27:44 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x9a) 18:27:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 18:27:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0xfea4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0xf, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54e5ab0516dc5ba5, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000d34d88ba6cf4e9080ada400001000073c6e369002300b6674c28838e0000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2"], 0x48) getsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, &(0x7f0000000240)) fchmod(r2, 0x16) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000040)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x10004e21}, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16], 0x2}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r3, 0x1) 18:27:44 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x305, &(0x7f0000000000)=ANY=[]}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) [ 319.555882] binder: 11455:11457 ioctl c0306201 0 returned -14 [ 319.596264] binder: 11455:11463 ioctl c0306201 0 returned -14 18:27:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:44 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:27:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(0x0, r2, 0x0) 18:27:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @local={0xac, 0x14, 0xffffffffffffffff}, {[@timestamp={0x44, 0x4}]}}, @udp={0x0, 0x0, 0x18, 0x0, [@guehdr={0x1}, @guehdr={0x1}, @guehdr={0x1, 0x0, 0x0, 0x0, 0x100}, @guehdr={0x1}]}}}}}, 0x0) 18:27:44 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 18:27:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x18}}], 0x1, 0x0) 18:27:44 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 18:27:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_set$pid(0x0, 0x0, 0x80000000) 18:27:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 18:27:45 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="318533735b5bae", 0x7}], 0x1}}], 0x27, 0x0) 18:27:45 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) utime(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000300)) 18:27:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x3c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = gettid() tkill(r3, 0x10010000000032) 18:27:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(0x0, 0x3a0b467142b450e1) 18:27:45 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)) 18:27:45 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) 18:27:45 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:45 executing program 2: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 18:27:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) keyctl$get_security(0x11, r1, 0x0, 0x0) 18:27:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipz_v\x02\x00\x00\b\x00\x00\x00\x05\x00', {0x2, 0x0, @loopback}}) 18:27:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @remote}, 0x10) 18:27:45 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) 18:27:45 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'\x00\x9a:\x9a\xbc\x00@\x00\x00\x00\x00\x00\xef\xff\xff\xff', @ifru_hwaddr=@random="1ed89e6c0445"}}) 18:27:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:46 executing program 1: 18:27:46 executing program 5: 18:27:46 executing program 0: 18:27:46 executing program 2: 18:27:46 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:46 executing program 1: 18:27:46 executing program 5: 18:27:46 executing program 2: 18:27:46 executing program 0: 18:27:46 executing program 1: 18:27:46 executing program 2: 18:27:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:47 executing program 5: 18:27:47 executing program 0: 18:27:47 executing program 1: 18:27:47 executing program 2: 18:27:47 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:47 executing program 0: 18:27:47 executing program 2: 18:27:47 executing program 1: 18:27:47 executing program 5: 18:27:47 executing program 0: r0 = socket(0x11, 0x8000a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, 0xffffffffffffffff) 18:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r3, r0) 18:27:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:48 executing program 1: setrlimit(0x7, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:27:48 executing program 5: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa9}]}]}, 0x70}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x2d}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:27:48 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x3) 18:27:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 18:27:48 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x4e800) write(r1, &(0x7f0000000340), 0x41395527) 18:27:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 18:27:48 executing program 2: r0 = gettid() r1 = getpid() tgkill(r0, r1, 0x0) 18:27:48 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x12) write$apparmor_exec(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1) sendfile(r0, r1, 0x0, 0x8000fffffffa) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 323.827462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 323.847929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 18:27:48 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 323.882530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 323.916798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 323.968316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 323.981151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 323.991844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.003001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.023026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.039599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.050329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.060159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.070151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.079958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.089836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.099864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.109715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.119407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.129854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.139538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.149360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.159165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.169040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.178743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.188612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.202207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.211835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.221696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.231537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.241373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.251181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.261221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.270853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.280852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.290782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.300461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.310140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.319858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.329575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.339280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.349185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.358975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.368844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.378505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.388398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.398203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.407814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.417677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.427628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.437289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.447046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.456885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.466492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.476282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.485976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.495693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.505439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.515379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.525055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.534730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.544367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.554072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.563986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:49 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x12) write$apparmor_exec(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1) sendfile(r0, r1, 0x0, 0x8000fffffffa) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 324.574687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.585680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.597859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.607783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.618354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.628743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.643052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.652812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.663495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.673201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.682989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.692701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.704697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:49 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd", 0x3b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 18:27:49 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:49 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0) 18:27:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_create(0x9, 0x0) 18:27:49 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x6}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 324.715796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.728118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 324.737852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 18:27:49 executing program 2: r0 = getpid() wait4(r0, 0x0, 0x0, 0x0) 18:27:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) dup2(r0, r1) 18:27:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() tkill(r2, 0x9) preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 18:27:49 executing program 2: 18:27:49 executing program 0: 18:27:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:50 executing program 5: 18:27:50 executing program 2: 18:27:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() tkill(r2, 0x9) preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 18:27:50 executing program 0: 18:27:50 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:50 executing program 5: 18:27:50 executing program 0: 18:27:50 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 18:27:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') getdents64(r0, &(0x7f00000000c0)=""/81, 0x1b) 18:27:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) keyctl$get_security(0x11, r1, 0x0, 0x0) 18:27:50 executing program 2: unshare(0x6c060000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000440)={'nat\x00'}, &(0x7f00000004c0)=0x54) 18:27:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001100000000010000000000000800040002000000", 0x24) 18:27:51 executing program 0: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r0, &(0x7f0000000000), 0x1170) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 18:27:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bind$netlink(r0, &(0x7f0000000000), 0xc) 18:27:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:51 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 18:27:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x8db9) fallocate(r1, 0x0, 0x0, 0x200002) 18:27:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$get_security(0x11, r1, 0x0, 0x0) [ 326.478489] binder: 11771:11773 got transaction with invalid data ptr 18:27:51 executing program 1: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000007, 0x0) 18:27:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) [ 326.539277] binder: 11771:11773 transaction failed 29201/-14, size 96-24 line 3155 [ 326.573000] binder: undelivered TRANSACTION_ERROR: 29201 18:27:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$get_security(0x11, r1, 0x0, 0x0) [ 326.650416] binder: 11805:11807 got transaction with invalid data ptr [ 326.657464] binder: 11805:11807 transaction failed 29201/-14, size 96-24 line 3155 [ 326.675966] binder: undelivered TRANSACTION_ERROR: 29201 18:27:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) 18:27:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$assume_authority(0x10, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) 18:27:52 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x11, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) 18:27:52 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) 18:27:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, 0x0, 0x0) [ 327.397818] binder: 11822:11831 got transaction with invalid data ptr [ 327.424016] binder: 11822:11831 transaction failed 29201/-14, size 96-24 line 3155 18:27:52 executing program 5: 18:27:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:52 executing program 0: [ 327.469978] binder: undelivered TRANSACTION_ERROR: 29201 18:27:52 executing program 5: [ 327.567807] binder: 11844:11848 got transaction with invalid data ptr [ 327.604738] binder: 11844:11848 transaction failed 29201/-14, size 96-24 line 3155 [ 327.632408] binder: undelivered TRANSACTION_ERROR: 29201 18:27:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:52 executing program 0: 18:27:52 executing program 1: 18:27:52 executing program 5: 18:27:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:52 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:52 executing program 0: 18:27:52 executing program 1: 18:27:52 executing program 5: 18:27:53 executing program 0: 18:27:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:53 executing program 1: 18:27:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:53 executing program 5: 18:27:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:53 executing program 0: 18:27:53 executing program 1: 18:27:53 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:53 executing program 0: 18:27:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:53 executing program 1: 18:27:53 executing program 5: 18:27:53 executing program 0: 18:27:53 executing program 5: r0 = socket(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) [ 329.253130] binder: 11898:11901 transaction failed 29189/-22, size 96-24 line 3014 [ 329.303663] binder: undelivered TRANSACTION_ERROR: 29189 18:27:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}, {}, {0xffffffffffffffff, 0x2070}, {0xffffffffffffffff, 0x1}, {}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x19}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:54 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000680)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 18:27:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:54 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080)=0x2ecb, 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xfc7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100000000007fd, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) 18:27:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='nv\x00', 0x3) 18:27:54 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 18:27:54 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) [ 330.107579] binder: 11919:11926 transaction failed 29189/-22, size 96-24 line 3014 18:27:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x46}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x1b3) 18:27:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) [ 330.156749] binder: undelivered TRANSACTION_ERROR: 29189 18:27:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000600)=';'}) 18:27:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0x3e8}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 330.290511] binder: 11944:11951 transaction failed 29189/-22, size 96-24 line 3014 [ 330.318147] binder: undelivered TRANSACTION_ERROR: 29189 [ 330.323955] binder: 11953:11955 got reply transaction with no transaction stack [ 330.339528] binder: 11953:11955 transaction failed 29201/-71, size 0-0 line 2922 18:27:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)='\x00\"', 0x2) 18:27:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x46}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x1b3) 18:27:55 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:55 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000940)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 18:27:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:55 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) r0 = getpid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) socket$inet6(0x10, 0x2, 0xa) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 330.992225] binder_alloc: 11963: binder_alloc_buf, no vma [ 330.999024] binder: 11963:11966 transaction failed 29189/-3, size 96-24 line 3137 [ 331.020177] binder: undelivered TRANSACTION_ERROR: 29189 18:27:55 executing program 1: r0 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xffffffffffffff41) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) faccessat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) tkill(r0, 0x1000000000016) [ 331.103253] binder_alloc: 11976: binder_alloc_buf, no vma [ 331.115444] binder: 11976:11980 transaction failed 29189/-3, size 96-24 line 3137 18:27:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:55 executing program 0: r0 = open(&(0x7f0000000300)='./file0\x00', 0x143042, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0xfffffffffffffec5) r1 = gettid() bind(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x16) [ 331.150271] binder: undelivered TRANSACTION_ERROR: 29189 18:27:55 executing program 5: creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 331.259113] binder_alloc: 11998: binder_alloc_buf, no vma [ 331.271129] binder: 11998:12001 transaction failed 29189/-3, size 96-24 line 3137 [ 331.298363] binder: undelivered TRANSACTION_ERROR: 29189 18:27:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, &(0x7f0000000140)={0xfff}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:56 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0xb) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 18:27:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000400)=[@request_death], 0x0, 0x0, 0x0}) 18:27:56 executing program 2: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:56 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:27:56 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:56 executing program 1: 18:27:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\r\xc2\x00\t\x00\x00\x00\x80\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="8723ec06c144381cea181db7dadc28aa", 0x0, 0x0, 0xff}, 0x20) 18:27:56 executing program 2: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:56 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000100000250900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060"]) 18:27:56 executing program 5: mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) munlock(&(0x7f0000001000/0x4000)=nil, 0x4000) 18:27:56 executing program 2: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) [ 331.904610] binder: 12014:12028 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 18:27:57 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) chroot(&(0x7f0000000440)='./file0\x00') preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x7}}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000daffffff02000000000000002844d13e9be3e18ffa5e1fdb0c1e0cfa0d7f8dbbd5a9ad7fcea3b742251301fddfde4f3b162f3f335510c49cead6854856b105b903247db6936a8c63b2454846614e0f53da895014d7ca84e94a5fd17513873438fa11219ce36b20b602d71a6131c2f808e508293564697fe6ba3c7a69068d04f5156cfc45972daf68b7ac9c0ec3c5feedbd8906dfd0e70f"], 0x10) 18:27:57 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\r\xc2\x00\t\x00\x00\x00\x80\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="8723ec06c144381cea181db7dadc28aa", 0x0, 0x0, 0xff, 0x1}, 0x20) 18:27:57 executing program 4: getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\r\xc2\x00\t\x00\x00\x00\x80\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="8723ec06c144381cea181db7dadc28aa", 0x0, 0x0, 0xff}, 0x20) 18:27:57 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:57 executing program 5: 18:27:57 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:57 executing program 5: 18:27:57 executing program 0: 18:27:57 executing program 0: 18:27:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:57 executing program 5: [ 333.094057] binder_alloc: 12090: binder_alloc_buf, no vma [ 333.114670] binder: 12090:12092 transaction failed 29189/-3, size 96-24 line 3137 [ 333.136268] binder: undelivered TRANSACTION_ERROR: 29189 18:27:57 executing program 1: 18:27:57 executing program 0: 18:27:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:58 executing program 4: getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:58 executing program 5: 18:27:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:58 executing program 0: 18:27:58 executing program 1: 18:27:58 executing program 5: 18:27:58 executing program 1: 18:27:58 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local}}}}, 0x0) [ 333.725115] binder_alloc: 12103: binder_alloc_buf, no vma [ 333.753949] binder: 12103:12104 transaction failed 29189/-3, size 96-24 line 3137 18:27:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:58 executing program 5: io_setup(0x1f, &(0x7f0000000000)=0x0) io_destroy(r0) [ 333.794922] binder: undelivered TRANSACTION_ERROR: 29189 18:27:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/240) ioctl$PPPIOCSACTIVE(r1, 0x40107447, 0x0) [ 333.851779] binder_alloc: 12119: binder_alloc_buf, no vma [ 333.893275] binder: 12119:12122 transaction failed 29189/-3, size 96-24 line 3137 [ 333.916414] binder: undelivered TRANSACTION_ERROR: 29189 18:27:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:27:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:27:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:59 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r3) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, 0x0, [{r1}]}) 18:27:59 executing program 5: clock_adjtime(0x0, &(0x7f0000000000)={0x52b}) 18:27:59 executing program 4: getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:27:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) 18:27:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:27:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) [ 334.653526] binder: 12137:12139 transaction failed 29189/-22, size 96-24 line 3014 [ 334.671862] binder: undelivered TRANSACTION_ERROR: 29189 18:27:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000340)="c59f"}) 18:27:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:27:59 executing program 5: mknod(&(0x7f0000000100)='./file0\x00', 0x1ffb, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) [ 334.740952] binder: 12151:12154 transaction failed 29189/-22, size 96-24 line 3014 [ 334.792089] binder: undelivered TRANSACTION_ERROR: 29189 18:28:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:28:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:28:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1000006) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 18:28:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:00 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 18:28:00 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:00 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:00 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:00 executing program 1: r0 = socket(0x2000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 335.597433] binder: 12174:12181 transaction failed 29189/-22, size 96-24 line 3014 18:28:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1000006) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 18:28:00 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) [ 335.651364] binder: undelivered TRANSACTION_ERROR: 29189 18:28:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) 18:28:01 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:01 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmsg(r1, &(0x7f0000000a40)={0x0, 0xffffff3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) 18:28:01 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) read$eventfd(r2, &(0x7f00000003c0), 0x8) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x444200, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)={0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x3}) syz_open_pts(r5, 0x0) close(r5) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000300)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)) r6 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.qe\xb3inux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x1b, 0x0) r7 = open(&(0x7f0000000340)='./bus\x00', 0x0, 0x45) ftruncate(r3, 0x800fe) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) 18:28:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:28:01 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="ca"]], 0x0, 0x0, 0x0}) 18:28:01 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:28:01 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 18:28:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r2, 0x10099b7) [ 336.638915] binder: 12247:12250 ioctl c0306201 0 returned -14 18:28:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x4000224, 0x0) 18:28:02 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x1277, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00%']) 18:28:02 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 18:28:02 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:02 executing program 5: pipe(&(0x7f0000000140)) pipe(&(0x7f0000000200)) r0 = socket(0x2, 0x80802, 0x0) epoll_create1(0x0) shutdown(r0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1ff}, &(0x7f0000000200), 0x0) 18:28:02 executing program 1: 18:28:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 337.356205] binder: 12272:12275 ioctl c0306201 0 returned -14 18:28:02 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:02 executing program 5: 18:28:02 executing program 1: 18:28:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 337.439087] binder: 12286:12289 ioctl c0306201 0 returned -14 18:28:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x4000224, 0x0) 18:28:02 executing program 5: 18:28:02 executing program 1: 18:28:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:28:02 executing program 0: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:02 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:02 executing program 5: 18:28:02 executing program 1: r0 = socket(0x1000100000010, 0x3, 0x0) getpgid(0x0) write$P9_RWRITE(r0, 0x0, 0xfffffdbf) 18:28:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:28:02 executing program 0: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:03 executing program 5: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, 0x0, 0xc4b322c0b65c0e14) 18:28:03 executing program 1: pipe(0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 18:28:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x4000224, 0x0) 18:28:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x38, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:03 executing program 0: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:03 executing program 5: fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x0, 0x0) getpgid(0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x32f, 0x0) 18:28:03 executing program 1: r0 = socket(0x1, 0x1, 0x0) pipe(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = gettid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) write$binfmt_script(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) tkill(r1, 0x1000000000016) 18:28:03 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:03 executing program 5: syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sched_getaffinity(0xffffffffffffffff, 0x0, 0x0) 18:28:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 18:28:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x38, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, 0x0}) [ 339.178451] binder: 12348:12357 got transaction with invalid offsets ptr [ 339.187438] binder: 12348:12357 transaction failed 29201/-14, size 96-24 line 3164 [ 339.200937] binder: undelivered TRANSACTION_ERROR: 29201 18:28:03 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) munlockall() r0 = gettid() ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) read(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffff8) tkill(r0, 0x1000000000016) 18:28:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 18:28:03 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) sendmsg$unix(r0, &(0x7f0000002780)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0xffffffffffffff36}, 0x0) [ 339.308165] binder: 12368:12372 got transaction with invalid offsets ptr [ 339.331481] binder: 12368:12372 transaction failed 29201/-14, size 96-24 line 3164 [ 339.367560] binder: undelivered TRANSACTION_ERROR: 29201 18:28:04 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x100000001, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) write$9p(r0, 0x0, 0x0) 18:28:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 18:28:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x38, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:04 executing program 1: r0 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xffffffffffffff41) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) faccessat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) tkill(r0, 0x1000000000016) 18:28:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 18:28:04 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00), 0x0, 0x0) 18:28:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xfffffffffffffdad) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_rr_get_interval(0x0, 0x0) r1 = gettid() write$P9_RFLUSH(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) tkill(r1, 0x1000000000016) 18:28:04 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) [ 340.100944] binder: 12389:12399 got transaction with invalid offsets ptr [ 340.135900] binder: 12389:12399 transaction failed 29201/-14, size 96-24 line 3164 18:28:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR], 0x0, 0x0, 0x0}) 18:28:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00), 0x0, 0x0) 18:28:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) [ 340.160798] binder: undelivered TRANSACTION_ERROR: 29201 18:28:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00), 0x0, 0x0) 18:28:04 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 340.215769] binder: 12415:12417 got transaction with invalid offsets ptr [ 340.238287] binder: 12415:12417 transaction failed 29201/-14, size 96-24 line 3164 18:28:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000017c0)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e2200000009fe8000000000000000000000000000bb47820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000008fedfab3f5123f7c916d3cf86586118880000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000f2ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005eb67f2425bd85000000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000e526992bf6b0030400000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c44a27c196c3e0d0000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000f100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bba4b3000000000000000000000000000000000000000000000000002191cc46831b0a81032e24033046752c8dc5596a5b8a7ea694dc870b6742a4e72c6b5225f1ec687b37549d5a1db100dd3b80a4f3d20371a99c9ccdc713165213e2afb018c2c0a8d310aaf5d19df85ae36d8a5f220608fd24b3d26e0cab455187ca3197a3a82a65ca1f96f6a893b3ef14cdc357604936b783529534733a3a852e3e847b750c0b3a8d46b872a33d2a0aea84a60b447b60a2a2fcca8b7646382c08fe4a7534b1f34283605f2033ebba671ff11b9359f3a400658822bd03cb77754ccfaed53c3685df4d2610ec5d8af51d7447612f1e2f1d347858c15b"], 0x490) 18:28:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR], 0x0, 0x0, 0x0}) [ 340.274540] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.339230] binder: 12431:12434 got transaction with invalid offsets ptr [ 340.361242] binder: 12431:12434 transaction failed 29201/-14, size 96-24 line 3164 [ 340.401118] binder: undelivered TRANSACTION_ERROR: 29201 18:28:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 18:28:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x14}}], 0x14}}], 0x1, 0x0) 18:28:05 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f0000002080)={&(0x7f0000000000)=@un=@abs, 0xfffffffffffffed4, 0x0, 0x0, 0x0, 0xe4}, 0x0) 18:28:05 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x1ffb, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x60e, 0x0) fcntl$getown(r0, 0x5) 18:28:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR], 0x0, 0x0, 0x0}) 18:28:05 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x14}}], 0x14}}], 0x1, 0x0) 18:28:05 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) socket$inet6(0x10, 0x2, 0xa) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 18:28:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:05 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 340.975574] binder: 12451:12453 got transaction with invalid offsets ptr [ 340.995290] binder: 12451:12453 transaction failed 29201/-14, size 96-24 line 3164 [ 341.008288] binder: undelivered TRANSACTION_ERROR: 29201 18:28:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x14}}], 0x14}}], 0x1, 0x0) 18:28:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x38048100) [ 341.095673] binder: 12469:12470 got transaction with invalid data ptr [ 341.124938] binder: 12469:12470 transaction failed 29201/-14, size 96-24 line 3155 [ 341.162319] binder: undelivered TRANSACTION_ERROR: 29201 18:28:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 18:28:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x38, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:06 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x200000000038) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xf9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:28:06 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") socket$netlink(0x10, 0x3, 0x0) getgid() sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) write(r0, &(0x7f0000000140)="1b0000001a005f0014f9f407000909000a00800000000000000000", 0x1b) 18:28:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:06 executing program 1: unshare(0x6c060000) r0 = socket(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 341.909798] binder: 12492:12499 got transaction with invalid offsets ptr [ 341.949395] binder: 12492:12499 transaction failed 29201/-14, size 96-24 line 3164 18:28:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x38, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:28:06 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fe03000008"], 0x5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) r4 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r4, 0x1000008912, &(0x7f0000000740)="0805b5055e0bcfe8475071") splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 341.976667] binder: undelivered TRANSACTION_ERROR: 29201 18:28:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="5d172f6bfa43c7024d2f9cde25d79ac6"}, 0x1c, 0x0}}], 0x1, 0x0) [ 342.083540] binder: 12523:12526 got transaction with invalid offsets ptr [ 342.094028] binder: 12523:12526 transaction failed 29201/-14, size 96-24 line 3164 [ 342.137731] binder: undelivered TRANSACTION_ERROR: 29201 18:28:07 executing program 1: 18:28:07 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x38, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:07 executing program 0: 18:28:07 executing program 0: 18:28:07 executing program 1: 18:28:07 executing program 3: 18:28:07 executing program 3: [ 342.801879] binder: 12538:12542 got transaction with invalid offsets ptr [ 342.832362] binder: 12538:12542 transaction failed 29201/-14, size 96-24 line 3164 18:28:07 executing program 0: 18:28:07 executing program 1: 18:28:07 executing program 5: 18:28:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 342.857736] binder: undelivered TRANSACTION_ERROR: 29201 18:28:07 executing program 3: [ 342.973613] binder: 12556:12559 got transaction with invalid data ptr [ 343.011358] binder: 12556:12559 transaction failed 29201/-14, size 96-24 line 3155 18:28:07 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:07 executing program 0: 18:28:07 executing program 1: 18:28:07 executing program 5: 18:28:07 executing program 3: 18:28:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:07 executing program 5: [ 343.029467] binder: undelivered TRANSACTION_ERROR: 29201 18:28:07 executing program 3: 18:28:07 executing program 1: 18:28:07 executing program 0: 18:28:07 executing program 5: 18:28:07 executing program 1: [ 343.157927] binder: 12576:12579 unknown command 0 [ 343.190769] binder: 12576:12579 ioctl c0306201 20000180 returned -22 18:28:07 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:07 executing program 3: 18:28:07 executing program 0: 18:28:07 executing program 1: 18:28:07 executing program 5: 18:28:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:08 executing program 0: 18:28:08 executing program 3: 18:28:08 executing program 5: 18:28:08 executing program 1: [ 343.352102] binder: 12596:12597 unknown command 0 [ 343.367533] binder: 12596:12597 ioctl c0306201 20000180 returned -22 18:28:08 executing program 0: 18:28:08 executing program 1: 18:28:08 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:08 executing program 3: 18:28:08 executing program 5: 18:28:08 executing program 0: 18:28:08 executing program 1: 18:28:08 executing program 3: 18:28:08 executing program 0: 18:28:08 executing program 1: 18:28:08 executing program 5: [ 343.631498] binder: 12625:12627 unknown command 0 18:28:08 executing program 0: 18:28:08 executing program 1: [ 343.660299] binder: 12625:12627 ioctl c0306201 20000180 returned -22 18:28:08 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:08 executing program 3: 18:28:08 executing program 5: 18:28:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:08 executing program 1: 18:28:08 executing program 0: 18:28:08 executing program 5: 18:28:08 executing program 3: 18:28:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:08 executing program 1: [ 343.824638] binder: 12646:12650 unknown command 0 [ 343.835129] binder: 12646:12650 ioctl c0306201 20000180 returned -22 18:28:08 executing program 0: 18:28:08 executing program 3: [ 343.978714] binder: 12660:12663 unknown command 0 [ 344.008412] binder: 12660:12663 ioctl c0306201 20000180 returned -22 18:28:08 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:08 executing program 0: 18:28:08 executing program 5: 18:28:08 executing program 1: 18:28:08 executing program 3: 18:28:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:08 executing program 5: 18:28:08 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00@z\x18Sb\xb0\xee\xb0< f\xb7\xc3\xfd0U\xedWM\xff\x7f\x88\xa2\xf4V~\x81U\xea\xfb\xcf\xef\xb3\xf8\xf2\xb5\x98\xe5\x93~z\xa3\x17\xb2\xb0#]Z\xe4$\x8b\xcb\xc5F\x92\x11\xf0\x1e-\x80\xb0\xef\x84\xe3[\x05\xb5\xb9\x9c\xa7@\x91\xbbq0x0, 0x3}, @can, @rc={0x1f, {0x8, 0x8, 0x8, 0x5e, 0x7f, 0xff}, 0x5}, 0x100, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000300)='ip6gre0\x00', 0x7, 0x5, 0xb261}) setsockopt$inet6_mreq(r3, 0x29, 0xe, &(0x7f00000003c0)={@remote, r6}, 0x14) pipe(&(0x7f0000000080)) sendfile(r5, r1, 0x0, 0x100000010a000201) 18:28:08 executing program 0: 18:28:08 executing program 1: [ 344.103200] binder: 12675:12677 unknown command 0 [ 344.109781] binder: 12675:12677 ioctl c0306201 20000180 returned -22 18:28:08 executing program 0: 18:28:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000"/26, @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 344.254345] binder: release 12692:12694 transaction 111 out, still active [ 344.267189] binder: undelivered TRANSACTION_COMPLETE [ 344.278394] binder: send failed reply for transaction 111, target dead 18:28:09 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:09 executing program 1: 18:28:09 executing program 5: 18:28:09 executing program 0: 18:28:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000"/26, @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:09 executing program 3: 18:28:09 executing program 5: 18:28:09 executing program 3: 18:28:09 executing program 0: 18:28:09 executing program 1: 18:28:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000"/26, @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 344.391858] binder: release 12709:12712 transaction 113 out, still active [ 344.409187] binder: undelivered TRANSACTION_COMPLETE [ 344.431358] binder: send failed reply for transaction 113, target dead 18:28:09 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='r'], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) [ 344.492893] binder: release 12719:12721 transaction 115 out, still active [ 344.510728] binder: undelivered TRANSACTION_COMPLETE [ 344.538935] binder: send failed reply for transaction 115, target dead 18:28:09 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="24000000000000002900000003000000fe8000000000000000000000000000aa", @ANYRES32], 0x24}}], 0x2, 0x0) 18:28:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2f, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000600000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:09 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)) 18:28:09 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_load(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8cff7cf9080000000006000000070000"], 0x10) 18:28:09 executing program 5: 18:28:09 executing program 5: 18:28:09 executing program 3: r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) 18:28:09 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x50daf500000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 344.657399] SELinux: policydb string does not match my string SE Linux [ 344.680965] binder_alloc: 12738: binder_alloc_buf size -4611686018425290656 failed, no address space 18:28:09 executing program 5: r0 = getpgrp(0x0) r1 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x3a, &(0x7f0000000040)={0x0, 0x0, 0x1}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r5, &(0x7f0000481000)=""/128, 0x80) 18:28:09 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3}]}}, @icmp=@address_reply}}}}, 0x0) 18:28:09 executing program 0: setns(0xffffffffffffffff, 0x0) [ 344.722252] SELinux: policydb string does not match my string SE Linux [ 344.730798] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 344.748352] binder: 12738:12743 transaction failed 29201/-28, size -4611686018427387808-2097152 line 3137 [ 344.832259] binder: undelivered TRANSACTION_ERROR: 29201 18:28:09 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2f, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000600000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:09 executing program 3: symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) open$dir(&(0x7f0000000040)='./file1/file0\x00', 0x0, 0x81) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, 0x0, 0x8800000) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x800000141042, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 18:28:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 18:28:09 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:28:09 executing program 1: chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) 18:28:09 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000400)={@random="f74a4097fe66", @empty=[0x3, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x6488, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @dev}, @gre}}}}, 0x0) [ 344.956927] binder_alloc: 12774: binder_alloc_buf size -4611686018425290656 failed, no address space [ 344.978031] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 18:28:09 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) [ 345.007200] binder: 12774:12780 transaction failed 29201/-28, size -4611686018427387808-2097152 line 3137 18:28:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) 18:28:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2f, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000600000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) syz_genetlink_get_family_id$ipvs(0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 18:28:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='nv\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) sendto$inet(r0, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0) [ 345.064926] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.151795] binder_alloc: 12807: binder_alloc_buf size -4611686018425290656 failed, no address space 18:28:09 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:09 executing program 0: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) syz_genetlink_get_family_id$ipvs(0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 345.218502] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 345.259404] binder: 12807:12809 transaction failed 29201/-28, size -4611686018427387808-2097152 line 3137 18:28:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x36, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 345.304982] binder: undelivered TRANSACTION_ERROR: 29201 18:28:10 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) [ 345.411727] binder_alloc: 12840: binder_alloc_buf size 54043195528446072 failed, no address space [ 345.438448] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 18:28:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) [ 345.470655] binder: 12840:12842 transaction failed 29201/-28, size 96-54043195528445976 line 3137 18:28:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x36, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:10 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00') [ 345.516353] binder: undelivered TRANSACTION_ERROR: 29201 18:28:10 executing program 0: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x84, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 345.599796] binder_alloc: 12861: binder_alloc_buf size 54043195528446072 failed, no address space [ 345.634849] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 345.659943] binder: 12861:12863 transaction failed 29201/-28, size 96-54043195528445976 line 3137 [ 345.683506] binder: undelivered TRANSACTION_ERROR: 29201 18:28:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffd31, 0xa2b7b7) 18:28:10 executing program 1: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) lseek(r0, 0x0, 0x3) 18:28:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x36, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='nv\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) sendto$inet(r0, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0) 18:28:10 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:10 executing program 1: lseek(0xffffffffffffffff, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20008088) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="90", 0x1}, {&(0x7f0000001c40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001b", 0xb}, {0x0}], 0x2}}], 0x2, 0x0) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) pipe(&(0x7f0000000000)) [ 346.091751] binder_alloc: 12884: binder_alloc_buf size 54043195528446072 failed, no address space [ 346.143477] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 346.182101] binder: 12884:12891 transaction failed 29201/-28, size 96-54043195528445976 line 3137 18:28:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x39, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 346.227476] binder: undelivered TRANSACTION_ERROR: 29201 18:28:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ac0)=ANY=[], 0x0) 18:28:11 executing program 5: 18:28:11 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:11 executing program 5: [ 346.591250] binder: 12915:12916 got transaction with invalid data ptr [ 346.609196] binder: 12915:12916 transaction failed 29201/-14, size 96-24 line 3155 [ 346.635134] binder: undelivered TRANSACTION_ERROR: 29201 18:28:11 executing program 0: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x84, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 18:28:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x39, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:11 executing program 5: 18:28:11 executing program 1: 18:28:11 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:11 executing program 3: 18:28:11 executing program 1: 18:28:11 executing program 3: 18:28:11 executing program 5: 18:28:11 executing program 1: [ 347.226421] binder: 12928:12930 got transaction with invalid data ptr [ 347.256099] binder: 12928:12930 transaction failed 29201/-14, size 96-24 line 3155 18:28:11 executing program 3: 18:28:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x39, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 347.271957] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.375425] binder: 12943:12946 got transaction with invalid data ptr [ 347.409567] binder: 12943:12946 transaction failed 29201/-14, size 96-24 line 3155 [ 347.453547] binder: undelivered TRANSACTION_ERROR: 29201 18:28:12 executing program 0: 18:28:12 executing program 5: 18:28:12 executing program 3: 18:28:12 executing program 1: 18:28:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3b, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000600000000000000018000000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:12 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:12 executing program 5: 18:28:12 executing program 3: 18:28:12 executing program 1: [ 348.182975] binder: 12958:12960 got transaction with invalid data ptr [ 348.209419] binder: 12958:12960 transaction failed 29201/-14, size 96-24 line 3155 18:28:12 executing program 5: 18:28:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x40008081) 18:28:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3a, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000006000000000000000180000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 348.250498] binder: undelivered TRANSACTION_ERROR: 29201 18:28:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@un=@abs, 0x80, 0x0}, 0x0) 18:28:12 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4}]}}, @icmp=@address_reply}}}}, 0x0) 18:28:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r0, 0x0, 0x0, 0x0) [ 348.353442] binder: 12972:12973 got transaction with invalid data ptr 18:28:13 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0xc, 0x5, 0x0, 0x0, [{[@empty]}]}, @ssrr={0x89, 0x3}]}}, @icmp=@address_reply}}}}, 0x0) 18:28:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='h'], 0x1) 18:28:13 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:13 executing program 0: syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) socket(0x2, 0x2, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read$eventfd(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980), &(0x7f0000000280)=0xfffffffffffffd8b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000000000000}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 18:28:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3a, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000006000000000000000180000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 348.394762] binder: 12972:12973 transaction failed 29201/-14, size 96-24 line 3155 [ 348.418216] binder: undelivered TRANSACTION_ERROR: 29201 18:28:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x882) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 18:28:13 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, [], {@mpls_uc={0x8847, {[], @ipv6={0x0, 0x6, "00f92d", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, {[], @udp={0x0, 0x0, 0x8}}}}}}}, 0x0) 18:28:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='h'], 0x1) 18:28:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3a, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000006000000000000000180000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 18:28:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='h'], 0x1) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 348.513715] binder: 13000:13003 got transaction with invalid data ptr [ 348.524910] binder: 13000:13003 transaction failed 29201/-14, size 96-24 line 3155 [ 348.543512] binder: undelivered TRANSACTION_ERROR: 29201 18:28:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x882) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x3) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x20002000005) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) 18:28:13 executing program 1: unlink(&(0x7f0000000040)='./file1\x00') 18:28:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 348.648863] binder: 13018:13021 got transaction with invalid data ptr 18:28:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x80881}, 0x0) [ 348.701079] binder: 13018:13021 transaction failed 29201/-14, size 96-24 line 3155 18:28:13 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:13 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f0000000280)="e1", 0xfffffffffffffe66, 0x0, 0x0, 0x1e6) splice(r2, 0x0, r1, 0x0, 0x2cfff, 0x0) [ 348.761290] binder: undelivered TRANSACTION_ERROR: 29201 18:28:13 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) close(r2) 18:28:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) 18:28:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100), 0x4) 18:28:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') fadvise64(r0, 0x0, 0x0, 0x5) 18:28:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000100)=""/258, 0x102}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/170, 0xaa}], 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 18:28:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x2e7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) 18:28:14 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) close(r2) 18:28:14 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='projid_map\x00') 18:28:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:28:14 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000100)=""/258, 0x102}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/170, 0xaa}], 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 18:28:14 executing program 3: setns(0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x6, 0x64}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) 18:28:14 executing program 1: 18:28:14 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) read$eventfd(r2, &(0x7f00000003c0), 0x8) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x444200, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)={0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x3}) syz_open_pts(r5, 0x0) close(r5) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000300)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)) r6 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.qe\xb3inux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x1b, 0x0) r7 = open(&(0x7f0000000340)='./bus\x00', 0x0, 0x45) ftruncate(r3, 0x800fe) readlinkat(r6, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYRES16=0x0, @ANYBLOB="005025bd700000fcff1300030003000300000000000800080080816d611e43ccdd0ced1cab618e72dda9078282000005000000080000306336f3b8b7f32f032cfd01e9026d00000067e31fcd423c6301158961eff5b1cb17b037be5a132a"], 0x2}}, 0x0) 18:28:14 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) pipe(&(0x7f0000000200)) socket(0x11, 0x80802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7f}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 18:28:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0xfffffffefffffff1, &(0x7f0000000000)) 18:28:14 executing program 5: pipe(&(0x7f0000000140)) pipe(&(0x7f0000000200)) r0 = socket(0x2, 0x80802, 0x0) epoll_create1(0x0) shutdown(r0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 18:28:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000400)={@random="f74a4097fe66", @empty=[0x3, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x6488, 0x0, 0x88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @dev={0xac, 0x14, 0x14, 0x17}}, @gre}}}}, 0x0) 18:28:14 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 18:28:14 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_channels={0x19}}) 18:28:14 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x2e7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) 18:28:14 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8910, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) 18:28:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x0) 18:28:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x421, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) fdatasync(r0) 18:28:14 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x421, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) creat(&(0x7f0000000300)='./file0\x00', 0x0) 18:28:14 executing program 3: 18:28:14 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:15 executing program 5: 18:28:15 executing program 1: 18:28:15 executing program 3: 18:28:15 executing program 2: 18:28:15 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:15 executing program 0: 18:28:15 executing program 2: 18:28:15 executing program 1: 18:28:15 executing program 0: 18:28:15 executing program 3: 18:28:15 executing program 5: 18:28:15 executing program 2: 18:28:15 executing program 0: 18:28:15 executing program 5: 18:28:15 executing program 1: 18:28:15 executing program 3: 18:28:15 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:15 executing program 2: 18:28:15 executing program 5: 18:28:15 executing program 0: 18:28:15 executing program 1: 18:28:15 executing program 3: 18:28:15 executing program 2: 18:28:15 executing program 3: 18:28:15 executing program 1: 18:28:15 executing program 5: 18:28:15 executing program 0: 18:28:15 executing program 3: 18:28:15 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:28:15 executing program 2: 18:28:15 executing program 1: 18:28:15 executing program 0: 18:28:15 executing program 5: 18:28:15 executing program 3: 18:28:15 executing program 3: 18:28:15 executing program 2: 18:28:15 executing program 5: 18:28:15 executing program 0: 18:28:15 executing program 1: 18:28:15 executing program 2: 18:28:15 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 18:28:15 executing program 3: 18:28:15 executing program 5: 18:28:15 executing program 0: 18:28:15 executing program 1: 18:28:15 executing program 2: 18:28:16 executing program 5: 18:28:16 executing program 3: 18:28:16 executing program 0: 18:28:16 executing program 2: 18:28:16 executing program 1: 18:28:16 executing program 3: 18:28:16 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 18:28:16 executing program 5: 18:28:16 executing program 0: 18:28:16 executing program 1: 18:28:16 executing program 3: 18:28:16 executing program 2: 18:28:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 18:28:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x10001ff) 18:28:16 executing program 5: 18:28:16 executing program 1: 18:28:16 executing program 3: 18:28:16 executing program 1: 18:28:16 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 18:28:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) unshare(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) write(r0, &(0x7f00000001c0)='t', 0x1) 18:28:16 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="77ba05434ae2", [], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x14, 0x82f, 0x0, @remote, @dev, {[], @tcp={{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x0, 0x5a]}) 18:28:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000200)=0x8040000010000006, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair(0xa, 0x0, 0x0, &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") sendto$inet6(r0, 0x0, 0xffffff19, 0xfffffefffffffffe, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0), 0xffffffffffffff4e, 0x0, 0x0, 0xce) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) 18:28:16 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:16 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x1}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) 18:28:16 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setregid(0xffffffffffffffff, 0x0) 18:28:16 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000400)={@random="f74a4097fe66", @empty=[0x3, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @dev}, @gre}}}}, 0x0) 18:28:16 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) unshare(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) write(r0, &(0x7f00000001c0)='t', 0x1) 18:28:16 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x21002033fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0xfffffdef) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:28:16 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)) 18:28:16 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) 18:28:16 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:17 executing program 2: symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 18:28:17 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40009100, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local}, 0x1c) write$binfmt_elf32(r0, 0x0, 0x0) 18:28:17 executing program 4: socket$inet(0x2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x2a1) 18:28:17 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:17 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40009100, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 18:28:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r4, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) 18:28:17 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:17 executing program 5: r0 = eventfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$eventfd(r0, &(0x7f0000000140), 0x8) 18:28:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r0, &(0x7f0000000680)=""/188, 0x18) 18:28:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="10000000000000000000000002000000"], 0x10}}], 0x2, 0x0) 18:28:17 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:17 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x33) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 18:28:17 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40009100, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") write$binfmt_elf32(r0, 0x0, 0x0) 18:28:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) read(r0, &(0x7f0000000140)=""/165, 0x10000014f) 18:28:17 executing program 4: socket$inet(0x2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x2a1) 18:28:17 executing program 0: r0 = socket$inet(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x0, 0x0, @loopback}, 0x17, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x10}}], 0x2, 0x0) 18:28:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32], 0x24}}], 0x2, 0x0) 18:28:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="10000000000000002900000032000000"], 0x10}}], 0x2, 0x0) 18:28:17 executing program 0: r0 = socket$inet(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x278, &(0x7f00000000c0)={0x4}, 0x8) 18:28:17 executing program 0: r0 = socket$inet(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x487, &(0x7f0000000000)=""/90, &(0x7f00000000c0)=0x5a) 18:28:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000012c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") recvfrom(r0, 0x0, 0x28e, 0x28e, &(0x7f00000002c0)=@rc, 0x718109) 18:28:18 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) syz_open_dev$sndtimer(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 18:28:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xa925, 0x2, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) 18:28:18 executing program 0: socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:18 executing program 4: r0 = socket(0xa, 0x80001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\xfd\x81\x00', 0x5}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) 18:28:18 executing program 0: socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:18 executing program 2: 18:28:18 executing program 4: 18:28:18 executing program 5: 18:28:18 executing program 2: 18:28:18 executing program 0: socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c000000", 0x52) 18:28:18 executing program 1: 18:28:18 executing program 4: 18:28:18 executing program 3: 18:28:18 executing program 5: 18:28:18 executing program 2: 18:28:18 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) 18:28:18 executing program 1: 18:28:18 executing program 4: 18:28:18 executing program 1: 18:28:18 executing program 2: 18:28:18 executing program 4: 18:28:18 executing program 5: 18:28:18 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) 18:28:18 executing program 1: 18:28:18 executing program 3: 18:28:18 executing program 2: 18:28:18 executing program 5: 18:28:18 executing program 4: 18:28:18 executing program 1: 18:28:18 executing program 5: 18:28:18 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) 18:28:18 executing program 3: 18:28:18 executing program 2: 18:28:19 executing program 4: 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040), 0x0) 18:28:19 executing program 5: 18:28:19 executing program 1: 18:28:19 executing program 3: 18:28:19 executing program 2: 18:28:19 executing program 4: 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040), 0x0) 18:28:19 executing program 5: 18:28:19 executing program 2: 18:28:19 executing program 3: 18:28:19 executing program 4: 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040), 0x0) 18:28:19 executing program 1: 18:28:19 executing program 2: 18:28:19 executing program 1: 18:28:19 executing program 5: 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000", 0x12) 18:28:19 executing program 3: 18:28:19 executing program 4: 18:28:19 executing program 2: 18:28:19 executing program 3: 18:28:19 executing program 5: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 18:28:19 executing program 1: link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000", 0x12) 18:28:19 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x21002033fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fchdir(0xffffffffffffffff) 18:28:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc10812ff, &(0x7f0000000580)) 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000", 0x12) 18:28:19 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x801012f0, &(0x7f0000000580)) 18:28:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x800412f9, &(0x7f0000000580)) 18:28:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1027}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) 18:28:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000001900)=[{0x0}, {0x0, 0xf0ff7f}, {&(0x7f0000001800)=""/254, 0xfe}], 0x3) 18:28:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x203, 0x408000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1027}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) 18:28:19 executing program 5: creat(&(0x7f0000000280)='./file0\x00', 0x1) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) wait4(0x0, 0x0, 0x80000000, 0x0) creat(0x0, 0x0) getpid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xfc, 0x4}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1e, 0x13012, r0, 0x0) 18:28:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1000"/16], 0x10}}], 0x2, 0x0) 18:28:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000001900)=[{0x0}, {0x0}, {&(0x7f0000000480)=""/82, 0x52}], 0x3) 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) 18:28:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ftruncate(0xffffffffffffffff, 0x208200) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x203, 0x408000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1027}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) 18:28:19 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) 18:28:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x13d}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) 18:28:19 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x69, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) lchown(0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) 18:28:19 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 18:28:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000012c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") recvfrom(r0, 0x0, 0x28e, 0x0, &(0x7f00000002c0)=@rc, 0x718109) 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000000000000000000080008000800", 0x20) 18:28:19 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000000000000000000080008000800", 0x20) 18:28:19 executing program 3: setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') fstat(0xffffffffffffffff, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 18:28:19 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 18:28:19 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000000000000000000080008000800", 0x20) 18:28:20 executing program 3: setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') fstat(0xffffffffffffffff, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 18:28:22 executing program 1: symlink(0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1f, 0x5, 0x2) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) 18:28:22 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c00", 0x22) 18:28:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) socket(0x1f, 0x5, 0x2) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x1041) 18:28:22 executing program 3: socket(0x11, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x1f, 0x5, 0x2) listen(r1, 0x0) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 18:28:22 executing program 5: pipe(0x0) r0 = socket(0x1f, 0x1, 0x0) listen(r0, 0x0) 18:28:22 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = creat(0x0, 0x0) fcntl$getown(r0, 0x9) 18:28:22 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c00", 0x22) 18:28:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioprio_set$uid(0x0, 0x0, 0x2244) 18:28:22 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c00", 0x22) 18:28:22 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fsetxattr(r1, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) 18:28:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@local, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 18:28:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) 18:28:23 executing program 1: 18:28:23 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c0000", 0x23) 18:28:23 executing program 2: 18:28:23 executing program 4: 18:28:23 executing program 3: 18:28:23 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c0000", 0x23) 18:28:23 executing program 2: 18:28:23 executing program 5: 18:28:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6) dup2(r2, r3) 18:28:23 executing program 4: 18:28:23 executing program 3: 18:28:23 executing program 2: 18:28:23 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800080008000c0000", 0x23) 18:28:23 executing program 4: 18:28:23 executing program 5: 18:28:23 executing program 1: 18:28:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x5, 0x5, 0x3, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x201a0, 0x0, 0xfffffff8, 0x4, 0x594, 0x7, 0x7}) socket$unix(0x1, 0x0, 0x0) 18:28:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:23 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xc}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)) 18:28:23 executing program 5: 18:28:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000040)="f9", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 18:28:23 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = dup2(r2, r2) preadv(r3, &(0x7f00000027c0)=[{&(0x7f0000001500)=""/4096, 0x2cd}], 0x1, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000200)) r4 = socket(0x2, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x60000000}) shutdown(r4, 0x1) shutdown(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x0, 0x100}, 0x0, &(0x7f0000000100)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:28:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x5, 0x5, 0x3, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x201a0, 0x0, 0xfffffff8, 0x4, 0x594, 0x7, 0x7}) socket$unix(0x1, 0x0, 0x0) 18:28:23 executing program 5: r0 = socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00', 0x2}, 0xffffff89) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl(r0, 0x8916, &(0x7f0000000000)) 18:28:23 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00', 0x2}, 0x105) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 18:28:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0x10021, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400aa7e63f816ab51d70f70e3ea7a0000", @ANYRES16=0x0, @ANYBLOB="e09bd20411fc710e920c2019c5c1b14cdc1e695dd194eb4cedc7a0353a00000000000000000016000000adfe020065010400000002000000000000"], 0xfffffead}}, 0x8044) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1}, 0x0) 18:28:23 executing program 3: unshare(0x6c060000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0x10021, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400aa7e63f816ab51d70f70e3ea7a0000", @ANYRES16=0x0, @ANYBLOB="e09bd20411fc710e920c2019c5c1b14cdc1e695dd194eb4cedc7a0353a00000000000000000016000000adfe020065010400000002000000000000"], 0xfffffead}}, 0x8044) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1}, 0x0) 18:28:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:23 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xc}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000009b4b62b}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:28:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007500)=[{{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000003140)="b572c696a35256a89daccca091d85afb986da1565519f1e2cad8bb90f059ec97502bf616981e18617a808c23bd7a404c02a67bf153e5b226d46f9eb60ae17475152bfcb0414579dfcde8ebe1e44bb384be528599db7517e4aa7938ceb00472fe2cfcabe2ef76abfc4e23673af123dcd0ce90d2d1ac5db576b374f5e6a7c19cc9dd943e446f36fc1100e937f70cc19c3917742dc42ab19d49490bc5c15cf757abd2455e501a13b679", 0xa8}, {&(0x7f0000003200)="574cacd01c11965fae9c714fbc04c6d9c2967e4cec5547b4f2f7977ee41eb95ca171d8bab81ca716a81000d3c959513a8d98591c098dc8ba", 0x38}, {&(0x7f0000003240)="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", 0x139}], 0x3}}], 0x1, 0x0) 18:28:24 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = dup2(r2, r2) preadv(r3, &(0x7f00000027c0)=[{&(0x7f0000001500)=""/4096, 0x2cd}], 0x1, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000200)) r4 = socket(0x2, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x60000000}) shutdown(r4, 0x1) shutdown(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x0, 0x100}, 0x0, &(0x7f0000000100)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:28:24 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 18:28:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32], 0x24}}], 0x2, 0x0) 18:28:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000440)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) 18:28:24 executing program 2: open(0x0, 0x2070e, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x411, r0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0xb0041, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000380)="ef", 0x1}], 0x1) 18:28:24 executing program 3: unshare(0x6c060000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0x10021, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400aa7e63f816ab51d70f70e3ea7a0000", @ANYRES16=0x0, @ANYBLOB="e09bd20411fc710e920c2019c5c1b14cdc1e695dd194eb4cedc7a0353a00000000000000000016000000adfe020065010400000002000000000000"], 0xfffffead}}, 0x8044) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1}, 0x0) 18:28:24 executing program 5: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x2000, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x411, r0, 0x0) 18:28:24 executing program 2: open(0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffe5b) r0 = gettid() prctl$PR_GET_TIMERSLACK(0x1e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) pipe2$9p(0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, 0x0, 0x0) keyctl$revoke(0x3, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 18:28:24 executing program 0: socket$unix(0x1, 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$int_out(r0, 0x0, 0x0) 18:28:24 executing program 5: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040)=0x7, 0x4) pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x800) write$P9_RATTACH(r0, &(0x7f0000000740)={0x14, 0x69, 0x2, {0x0, 0x4, 0x7}}, 0x14) fcntl$setflags(r0, 0x2, 0x1) 18:28:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:24 executing program 0: open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xa0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xaa\x10\x05a\xd5\xba\x19ru\xcf\xd0\xc6b-\xfbA\xdb\x99\xe8\xe3\xd6\x1c\xeci\x16\x1c\xbb\xbc\xba\xe4\xdd\xb7F\xf2\xfbr\x81B\f\x01\xaeO&}m\xb2=\xc6\xd7\xc6\xb9y\x02,\x97u\xfd\x06\xe4\x9e1\xfa[}y', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 18:28:24 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) 18:28:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xa0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xaa\x10\x05a\xd5\xba\x19ru\xcf\xd0\xc6b-\xfbA\xdb\x99\xe8\xe3\xd6\x1c\xeci\x16\x1c\xbb\xbc\xba\xe4\xdd\xb7F\xf2\xfbr\x81B\f\x01\xaeO&}m\xb2=\xc6\xd7\xc6\xb9y\x02,\x97u\xfd\x06\xe4\x9e1\xfa[}y', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 18:28:24 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setresgid(r1, 0xee00, 0x0) 18:28:24 executing program 0: r0 = socket$inet6(0xa, 0x2000000000801, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffff8e, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) 18:28:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000040)="f9", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_names\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) 18:28:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/0\x00') 18:28:25 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 18:28:25 executing program 0: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1, 0x0) 18:28:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x48, 0x0, &(0x7f0000000100)) 18:28:25 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000200)) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:28:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @remote}, 0x10) 18:28:25 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 18:28:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_names\x00') 18:28:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.su\xf9\xc4\xa4', 0x7a05, 0x1700) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x40000000) 18:28:25 executing program 0: 18:28:25 executing program 5: 18:28:25 executing program 3: 18:28:25 executing program 2: 18:28:25 executing program 3: 18:28:25 executing program 5: 18:28:25 executing program 1: 18:28:26 executing program 2: 18:28:26 executing program 0: 18:28:26 executing program 3: 18:28:26 executing program 1: 18:28:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) epoll_create1(0x0) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:26 executing program 5: 18:28:26 executing program 0: 18:28:26 executing program 2: 18:28:26 executing program 3: 18:28:26 executing program 1: 18:28:26 executing program 5: 18:28:26 executing program 3: 18:28:26 executing program 5: 18:28:26 executing program 0: 18:28:26 executing program 2: 18:28:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) epoll_create1(0x0) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:26 executing program 1: 18:28:26 executing program 1: 18:28:26 executing program 2: 18:28:26 executing program 5: 18:28:26 executing program 3: 18:28:26 executing program 0: 18:28:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) epoll_create1(0x0) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:26 executing program 0: 18:28:26 executing program 3: 18:28:26 executing program 1: 18:28:26 executing program 5: 18:28:26 executing program 0: 18:28:26 executing program 2: 18:28:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:26 executing program 3: 18:28:26 executing program 5: 18:28:26 executing program 2: 18:28:26 executing program 1: 18:28:26 executing program 0: 18:28:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:26 executing program 3: 18:28:26 executing program 2: 18:28:26 executing program 1: 18:28:26 executing program 5: 18:28:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) 18:28:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:26 executing program 2: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x2) 18:28:26 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfff) 18:28:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) dup2(r0, r1) 18:28:26 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, 0x0, 0x0) 18:28:26 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x48, &(0x7f0000000140)={0xd1b, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 18:28:26 executing program 1: 18:28:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:27 executing program 3: pipe(0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 18:28:27 executing program 0: socket$unix(0x1, 0x5, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/121, &(0x7f0000000080)=0x79) 18:28:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xa0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xaa\x10\x05a\xd5\xba\x19ru\xcf\xd0\xc6b-\xfbA\xdb\x99\xe8\xe3\xd6\x1c\xeci\x16\x1c\xbb\xbc\xba\xe4\xdd\xb7F\xf2\xfbr\x81B\f\x01\xaeO&}m\xb2=\xc6\xd7\xc6\xb9y\x02,\x97u\xfd\x06\xe4\x9e1\xfa[}y', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x9) 18:28:27 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8913, 0x0) 18:28:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000001080)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x5c) 18:28:27 executing program 2: dup(0xffffffffffffffff) pipe2(0x0, 0xc1800) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x1, 0x0) execve(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)=[0x0, 0x0, &(0x7f00000001c0)=':system\x00', 0x0], &(0x7f0000000380)=[&(0x7f0000000280)='wlan1\x00', &(0x7f00000002c0)='selinux,cpuset\'md5sum(selinuxuser\x00', &(0x7f0000000300)='\x00']) 18:28:27 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='\xf8\xbd\x93\xe5q\xd5\xdb\xce#\xa6%\xffvb\xa4+\xe5y\xc5\xbc\xc5\xeb\xc32==mPB\xed\x1e\x99\xfa\xda\x9eT\x8d\x02\x87\xeb\xea\x9a\xf8Q\xe7\x99\x98\xc2fG\xecJ\xee\xd3<\x99W\x1fm\xe4\xb4&:\xc1\xb3\xcdu\x9d+\x93\xb5\x90\xda\xfax\xd7$\xa2(2r\xba?\xb0\x1by\x89\xfao\x16\x94\x85\xa1\xd5 \xd0/|\x95\xcb\xbbJ4J\xd2\xbd\x8c\xceNdh\"\xf3\vT\xe5\x9c\xad\xbf\xd6\xf5!e\x8c\xdf\xd5\xe8\x93\x9d\xe0x\x14q3fN\xcb\xc9\x86\x91\xfc\xac\x83\x9f\xae\n\xd7\xc4\xbfLmG\xb3m4\x0e\xee\x96n7\x81\xc7\xb7\x80|H=i\xd9\x80=\x0e\xbd\xe7C\x003c\xc2\x1a\x19', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#%'], 0x2) clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:28:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) 18:28:27 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x2) 18:28:27 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, 0x0, 0x0) 18:28:27 executing program 2: dup(0xffffffffffffffff) pipe2(0x0, 0xc1800) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x1, 0x0) execve(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)=[0x0, 0x0, &(0x7f00000001c0)=':system\x00', 0x0], &(0x7f0000000380)=[&(0x7f0000000280)='wlan1\x00', &(0x7f00000002c0)='selinux,cpuset\'md5sum(selinuxuser\x00', &(0x7f0000000300)='\x00']) 18:28:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f00000002c0)="fb", 0x1}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 18:28:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000140)) 18:28:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x1}) 18:28:27 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x6, 0x4) 18:28:27 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = getpid() getpriority(0x2, r1) 18:28:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = getpid() getpriority(0x2, r1) 18:28:27 executing program 1: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5460) 18:28:27 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x100005) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) inotify_init() accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) open$dir(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) lstat(0x0, 0x0) geteuid() 18:28:27 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x0) 18:28:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 18:28:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = getpid() getpriority(0x2, r1) 18:28:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 18:28:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000001080)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 18:28:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xd3, &(0x7f0000001080)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 18:28:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), 0x10) 18:28:27 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/32, 0x20}], 0x1) 18:28:27 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x0, 0x0) 18:28:27 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:28:27 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 18:28:27 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b82000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:27 executing program 5: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 18:28:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x1, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000600)='veth1\x00', 0x10000, 0x8, 0xffff}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 18:28:27 executing program 0: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 18:28:27 executing program 2: perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:28:27 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b82000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:27 executing program 1: perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:28:27 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\t\x00\x00\x00net1vmnet0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb90300060000000000510000b73800000000000000000000000000200002000000000000000000000000004000000000000000000000ffff0000000000000000001a000000000000000300000000000000000805bcda5c4c000000bc1ea14d68000000000000000000"], 0x78) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:28:27 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6300}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6300}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 18:28:28 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b82000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:28 executing program 2: 18:28:28 executing program 3: 18:28:28 executing program 1: 18:28:28 executing program 2: r0 = gettid() readlink(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000001280)={0x0, 0x4000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001240)) exit(0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40000, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) rt_sigpending(0x0, 0x0) tkill(r0, 0x1000000000016) 18:28:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e1}, 0x6e) 18:28:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xa0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xaa\x10\x05a\xd5\xba\x19ru\xcf\xd0\xc6b-\xfbA\xdb\x99\xe8\xe3\xd6\x1c\xeci\x16\x1c\xbb\xbc\xba\xe4\xdd\xb7F\xf2\xfbr\x81B\f\x01\xaeO&}m\xb2=\xc6\xd7\xc6\xb9y\x02,\x97u\xfd\x06\xe4\x9e1\xfa[}y', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 18:28:28 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:28 executing program 5: 18:28:28 executing program 1: 18:28:28 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:28 executing program 0: 18:28:28 executing program 3: 18:28:28 executing program 5: 18:28:28 executing program 1: 18:28:28 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:28 executing program 2: 18:28:28 executing program 1: 18:28:28 executing program 5: 18:28:28 executing program 3: 18:28:28 executing program 0: 18:28:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b82000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:29 executing program 5: 18:28:29 executing program 1: 18:28:29 executing program 0: 18:28:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b82000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:29 executing program 2: 18:28:29 executing program 3: 18:28:29 executing program 1: 18:28:29 executing program 3: 18:28:29 executing program 0: 18:28:29 executing program 5: 18:28:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b82000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:29 executing program 2: 18:28:29 executing program 2: 18:28:29 executing program 5: 18:28:29 executing program 0: 18:28:29 executing program 1: 18:28:29 executing program 3: 18:28:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:29 executing program 5: 18:28:29 executing program 1: 18:28:29 executing program 0: 18:28:29 executing program 2: 18:28:29 executing program 3: 18:28:29 executing program 5: 18:28:29 executing program 1: 18:28:29 executing program 0: 18:28:29 executing program 2: 18:28:29 executing program 3: 18:28:29 executing program 5: 18:28:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:29 executing program 1: 18:28:29 executing program 0: 18:28:29 executing program 3: 18:28:29 executing program 2: 18:28:29 executing program 5: 18:28:29 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2}) fcntl$setlease(r0, 0x9, 0x0) 18:28:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffefc}, 0x14) 18:28:29 executing program 2: dup(0xffffffffffffffff) open$dir(&(0x7f00000001c0)='./file0\x00', 0x4c0700, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = socket(0x18, 0x2, 0x0) fcntl$lock(r1, 0x12522492d3eec166, 0x0) 18:28:29 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='\xf8\xbd\x93\xe5q\xd5\xdb\xce#\xa6%\xffvb\xa4+\xe5y\xc5\xbc\xc5\xeb\xc32==mPB\xed\x1e\x99\xfa\xda\x9eT\x8d\x02\x87\xeb\xea\x9a\xf8Q\xe7\x99\x98\xc2fG\xecJ\xee\xd3<\x99W\x1fm\xe4\xb4&:\xc1\xb3\xcdu\x9d+\x93\xb5\x90\xda\xfax\xd7$\xa2(2r\xba?\xb0\x1by\x89\xfao\x16\x94\x85\xa1\xd5 \xd0/|\x95\xcb\xbbJ4J\xd2\xbd\x8c\xceNdh\"\xf3\vT\xe5\x9c\xad\xbf\xd6\xf5!e\x8c\xdf\xd5\xe8\x93\x9d\xe0x\x14q3fN\xcb\xc9\x86\x91\xfc\xac\x83\x9f\xae\n\xd7\xc4\xbfLmG\xb3m4\x0e\xee\x96n7\x81\xc7\xb7\x80|H=i\xd9\x80=\x0e\xbd\xe7C\x003c\xc2\x1a\x19', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#%I'], 0x3) clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:28:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:29 executing program 5: 18:28:29 executing program 5: 18:28:29 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000020000000385a580000000000"], 0x40) 18:28:29 executing program 1: timerfd_gettime(0xffffffffffffffff, 0x0) 18:28:29 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = inotify_init1(0x0) dup2(r1, r0) read$eventfd(r0, 0x0, 0x0) 18:28:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) 18:28:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, r4}) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x707, 0x0) fcntl$setlease(r3, 0x400, 0x2) 18:28:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x49249249249255f, 0x200008c0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb) 18:28:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="06"]) [ 365.215807] ------------[ cut here ]------------ 18:28:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000400)=[@increfs, @clear_death={0x40046306}], 0x0, 0x0, 0x0}) [ 365.254178] WARNING: CPU: 1 PID: 14414 at mm/page_alloc.c:3069 __alloc_pages_nodemask+0x11d7/0x14b0() [ 365.284985] Kernel panic - not syncing: panic_on_warn set ... [ 365.284985] [ 365.292523] CPU: 1 PID: 14414 Comm: syz-executor.0 Not tainted 4.4.174+ #17 18:28:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}]}]}, 0x28}}, 0x0) [ 365.299633] 0000000000000000 259b834c08dc76be ffff8800a54a71a0 ffffffff81aad1a1 [ 365.307741] 0000000000000000 ffffffff82835ee0 ffffffff82885260 0000000000000bfd [ 365.315817] ffffffff813d12d7 ffff8800a54a7280 ffffffff813a48c2 0000000041b58ab3 [ 365.323890] Call Trace: [ 365.326490] [] dump_stack+0xc1/0x120 [ 365.326492] binder: tried to use weak ref as strong ref [ 365.326505] binder: 14428:14429 Release 1 refcount change on invalid ref 0 ret -22 [ 365.326510] binder: 14428:14429 unknown command 0 18:28:30 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r1, 0x0, r0, 0x0, 0xa3, 0x0) 18:28:30 executing program 1: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x00', 0x14, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 365.326519] binder: 14428:14429 ioctl c0306201 200003c0 returned -22 [ 365.356576] [] ? __alloc_pages_nodemask+0x11d7/0x14b0 [ 365.363430] [] panic+0x1b9/0x37b [ 365.368457] [] ? add_taint.cold+0x16/0x16 [ 365.374448] [] ? warn_slowpath_common.cold+0x5/0x20 [ 365.381138] [] warn_slowpath_common.cold+0x20/0x20 [ 365.388754] [] warn_slowpath_null+0x2a/0x30 [ 365.394740] [] __alloc_pages_nodemask+0x11d7/0x14b0 18:28:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 365.401415] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 365.407743] [] ? save_stack_trace+0x26/0x50 [ 365.413731] [] ? kasan_kmalloc.part.0+0x62/0xf0 [ 365.420084] [] ? kasan_kmalloc+0xb7/0xd0 [ 365.425808] [] ? policydb_read+0xc3b/0x2280 [ 365.431794] [] ? security_load_policy+0x23c/0x9c0 [ 365.438501] [] ? sel_write_load+0x175/0xf90 [ 365.444491] [] ? vfs_write+0x182/0x4e0 [ 365.450053] [] ? __alloc_pages_direct_compact+0x220/0x220 [ 365.457365] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 365.464219] [] ? trace_hardirqs_on+0xd/0x10 [ 365.470218] [] ? policydb_read+0x7dd/0x2280 [ 365.476210] [] ? kasan_slab_free+0x11a/0x190 [ 365.482274] [] ? kfree+0xf4/0x310 [ 365.490713] [] ? policydb_read+0x7dd/0x2280 [ 365.496673] [] ? security_load_policy+0x23c/0x9c0 [ 365.503158] [] ? sel_write_load+0x175/0xf90 [ 365.509111] [] ? __vfs_write+0x116/0x3d0 [ 365.514804] [] ? vfs_write+0x182/0x4e0 [ 365.520319] [] ? SyS_write+0xdc/0x1c0 [ 365.525759] [] ? do_fast_syscall_32+0x32d/0xa90 [ 365.532067] [] alloc_kmem_pages+0x12/0x20 [ 365.537857] [] kmalloc_order+0x21/0x70 [ 365.543383] [] kmalloc_order_trace+0x1f/0x1a0 [ 365.549508] [] __kmalloc+0x1c2/0x330 [ 365.554854] [] str_read+0x2b/0x130 [ 365.560022] [] role_read+0x23f/0x400 [ 365.565364] [] ? type_read+0x410/0x410 [ 365.570895] [] ? policydb_read+0x7dd/0x2280 [ 365.576865] [] policydb_read+0xc3b/0x2280 [ 365.583515] [] ? mark_held_locks+0xb1/0x100 [ 365.589467] [] ? get_page_from_freelist+0x9d8/0x1d00 [ 365.596202] [] ? type_read+0x410/0x410 [ 365.601721] [] ? string_to_av_perm+0x90/0x90 [ 365.607761] [] ? security_load_policy+0x103/0x9c0 [ 365.614242] [] ? check_preemption_disabled+0x3c/0x200 [ 365.621410] [] ? check_preemption_disabled+0x3c/0x200 [ 365.628231] [] ? kasan_unpoison_shadow+0x35/0x50 [ 365.634703] [] ? kasan_kmalloc+0xb7/0xd0 [ 365.640403] [] ? kmem_cache_alloc_trace+0x123/0x2d0 [ 365.647062] [] security_load_policy+0x23c/0x9c0 [ 365.653363] [] ? native_set_pgd+0x50/0x50 [ 365.659184] [] ? security_get_bools+0x610/0x610 [ 365.665548] [] ? vmap_page_range_noflush+0x517/0x780 [ 365.672300] [] ? trace_hardirqs_on+0x10/0x10 [ 365.678502] [] ? alloc_vmap_area.isra.0+0x810/0x810 [ 365.685195] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 365.691938] [] ? check_stack_object+0x114/0x160 [ 365.698391] [] ? __check_object_size+0x222/0x332 [ 365.704805] [] sel_write_load+0x175/0xf90 [ 365.710596] [] ? trace_hardirqs_on+0x10/0x10 [ 365.716669] [] ? sel_read_bool+0x240/0x240 [ 365.722542] [] ? trace_hardirqs_on+0x10/0x10 [ 365.728590] [] __vfs_write+0x116/0x3d0 [ 365.734117] [] ? sel_read_bool+0x240/0x240 [ 365.739980] [] ? __vfs_read+0x3c0/0x3c0 [ 365.745587] [] ? check_preemption_disabled+0x3c/0x200 [ 365.752417] [] ? check_preemption_disabled+0x3c/0x200 [ 365.759338] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 365.766160] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 365.772722] [] ? __sb_start_write+0x14f/0x310 [ 365.778851] [] vfs_write+0x182/0x4e0 [ 365.784222] [] SyS_write+0xdc/0x1c0 [ 365.789499] [] ? SyS_read+0x1c0/0x1c0 [ 365.794979] [] ? do_fast_syscall_32+0xd6/0xa90 [ 365.801198] [] ? SyS_read+0x1c0/0x1c0 [ 365.806641] [] do_fast_syscall_32+0x32d/0xa90 [ 365.812770] [] sysenter_flags_fixed+0xd/0x1a [ 365.819706] Kernel Offset: disabled [ 365.823613] Rebooting in 86400 seconds..